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Many iiltlK- jrlick-s puhlislied in Hurtlaire COMPUTIST dflail the rcmnval iit copy protL-tliiin 
schemes rrmii cDnimercial disks iir contain itiiormutinn on copy protectiun anij hackup methods 
in genera!. We also print hit copy puramcters. tips Ibr adventure games, advanced playing 
techniques (APTsi lor arcade game fanatics and any other information which may be of use 
to the serious Apple user. 

Hardcore COMPUTIST also contains a .special CORE section which focuses on infomiaiion 
not directly related to copy protection. Topics may include, hut are not limited to: tutorials. 
hardwarLv^nfiuarc pniduci review's and lippllcaiion and iiiiliiy programs. 



Whal Ls A Softkey Anyway? S«fikt;y is u wrni 
whith wc i.tHm:J 1(1 ili^stritn.' n pnitedurf thai rcniiivf^. 
(ir m IcaM circuiiivcnls. any tiipv priHcttnin im 4 
panltular di^k. Once a mftkcy pnncdurc hiiy Ixcn 
pcrftirtnciJ. ihc rchUkiriH Jislc tan u>iUiilly he tiipitd by 
the use iif Appii-'s COPY A priigrani Ion itiu DOS .1.3 
Sysicm MisiiT Hivkj 

Commuitds And ControLs: Iti any unick appeuring 
in Hardcurc COMPUTIST, L-nminunds «hifh a reader 
IS required tci pcrt'timi arv xi upart thmi ui^riiial !e.\t b\' 
t>cing indented and Ixild .An evaniptc is: 

PR#6 
FtilUiw rhisuilh ihc RETURN key, The RETURN key 
musi be prcs-icd at the end of CTery such enniiTOind unles.-; 
otherwise specified. 

C'tinintI characters are indicated by hein^ hosed. An 
enampEe is: 

Til eoinpltie this conimand. you must first Ijpv ilic 
number ft and I hen place one linger on the CTRL key 
and one flngef on the P key. 

Requirements: Most of the progtunis and sufikcys 
which appear 111 Hardcure C{JMPt.lTtST require one of 
the Apple )| series ofcomputers and ai Icasl on disk drive 
wiih DOS .13 (X'casionully. sonic pmgritms and 
pr(KX*dures have spi^cial 0.^11 irerncnts. The prerequisites 
tor dcprotection icehniCjucs iir pro|!ranis will always t)e 
listed at the hejiiniiing of Ihc anicle under the 
"Requirements:" heading- 

S<iflt»arc Recommendatiurui: The following pro 

trams lor siiniiar nncsi are strongly recommended fi>r 
readers wh» w ish lii *ihtain the n>i>si henelli trom x>ur 

articles: 

1 ) Applf«(fl Prugrain Editor such as Global Program 

I.mc l-dihir (GJ'LI::! 

2) .S«."rtr>r Rditor such as DiskEdii. ZAP from Bag of 
Tricks 111' Tricky Dick from The CIA. 

J( l>b.k .Search litilily sUL'h as The Inspector, The 
Tracei Iroiii The CIA or The CORt Disk Searcher, 

4) .^.vsrmbliT such a,s the S-C Assemhler or Merlin/Big 
Mac 

5) Bil Copy Priiuram such as Copy || Plus. Uicksmilh 
or the F.v.sential Dalii Dupliialor 

6) Te\l Editor capahle of producing normal sequcirtial 
lett Tiles such us Applcwnlcr j[. Magic Window |I 
or S^.■I^.•(:nW'^itcr ]I. 

You will also find COPYA, FID and MUFFIN Irinii 
the DOS 3 J System Masier Disk useful 
Super lOB: This program has iivisi reeenily appeared 
in Hardi'ore COMPLCITST No 22 Several sofikey 
procedures will make use o( a Super K)B controller, a 
small program that niusi he keyed mio the middle ol 
Super lOB T he ctmlroller changes Super lOB sii that 
it can copy different disks To gel the laiesi version ol 
this program, you amy iirder Hardcore COMPliTI.ST 
No. 22 as a back issue or order Program Librarv Disk 
No 22 

RESET Into The Mctittor: Many softkey pro- 
cedures require that ihe user be able to enter ife Apple's 
system nMniior during Ihe escvulioti of a copy proiected 
program Check ihe following lisi msec W'hat hardware 
you will need to dblairt Ihis ability. 
Apple II Plu-s - Apple '/c - Apple eiimputlhlfs: 1 1 Place 
an Integer BASIC ROM eard in one iif ihe .•\pple slots 
2 1 U.se a non maskable imerrupt iNMt) card sueh as 
Replay or Wildcard. 

Apple |[ Plus ■ .VppJc ciHnpulibltfs: 1 1 Install an F8 ROM 

wilh J modiried RFSPf vector on the computer's 



iiioiherhiiard as ilelailed in Ihe ".Modified RO.Vl's" article 
of Hardcore COMPUTIST Ni. 6 fir ihe "Dual ROM's ' 
arlitte in Hardcore COMPUTIST Nti. 19 
Appli^ Hv • Apple lie: Install a modi Tied CD ROM nn 
the computer's rreilherlxiard. Dim Lancaster's company 
(Synergetics. 746 Firsi Sireel: Box m)\iC. Thatcher. 
AZ 8.'>552; free voice HelpL.ine W}2-428-4071) sells the 
instnjctiims necessary 10 make Ihis iimdificatitm. Making 
this mixtifieaiion 10 an Apple /.'e will void lis warranty 
hut the increased ahiliiy to remove copy protection may 
jusiilv it 

Reronimended Literature: The Apple jj Retcrencr- 
Manual and DOS .T.l manual are musts for any seritius 
Apple user. Other helpful Ixxiks include: Btmiiih Apple 
DOS.ikm Wonh and Peter Lciehner. Qualil) Suliware, 
Sl'J.'JS: Assembly Ijiiittiitigr Fur TJir Apph-mfl 
Prt/nniinim'r. Roy Meyers and C'.W. Fmlcy, Addison 
Wesley. SI 6.95: and'W5>((;'i iitiirr In Tlir Applf. 
William Liiberi. Micro Ink . !;24 95. 
Keyinj! In Applesoft Pr(^rain.s: BA,S]C pmgrams 
are primed in Hardcore COMPUTIST in a formal Ihal 
is designed to minimi/e errors for readers who key in 
these programs To understand this format, you imisi 
first understand the lomvalled LlSf feature of .^pplcsofT 

An illustration if you sirike these keys: 

II HO\iE;RKMCU:AR SCREKN 
a program will he siorcd tn the computer's memory. 
Slrungclj, this program will itiil have a LIST that is 
esaetlv as you lyped it, Instead, the LIST will look like 
this: 

I« HOME : REM CLEAR St!REEN 

Programs don't usually LIST the same us they were 
keyed in tieeause .Applesoft insert.s spaces into a pn>gram 
listing before und after every command vicird or 
mathematical operator. These spaces usually diint pose 
a problem except in line numbers which eonlaiii Rt.M 
or DATA command words. Tlie space inserted after tlvese 
ctimmand words can he misleading For enamplc^ if you 
want a program 10 have si li.st lilie ihis: 

II DATA 67.45,54,52 
you would have to oinil the space directly after the DATA 
command word. If you were to key in ihe space directly 
alter the D.ATA command word, the LIST of tttc program 
would look like ihis. 

18 DATA fi7.4S,S4.52 
This LlS'f is different from the LIST you wanted The 
number of spaces you key alter DATA and RKM 
command words is very impiinani. 

All of this brings us to the Hardcore COMPUT 1ST 
Listing liirmat 111 a BASIC LIS I iilg, then: are rwo types 
of spaces, spaces that ilon't nialtet whetlier they are keycsl 
or not and spaces thai riust be keyed Spaces that musi 
he keyed m are primed as delta characters i* (. .All other 
spaces in a Hardcore COMPUTIST BASIC listing are 
pul Ihere for easier reading and it doesn't mutter Uthelher 
you type them or not 

fhcric is one exception: If you want your checksums 
(See "Computing Checksums " sectjoni to match up. you 
Miu.w ii"l key in any spaces aher a D,\TA command word 
unless ihey are marked by delta ctiar.K-ters. 
Keying In Hexdumps: Machine language programs 
are ptinted id Hardcore COMPUTIST as both -wiurce 
code and hc.idunips Only one of these fomiats need be 
keyed in lo get a machine language progr.im. Hexdumptt 
are Ihe shortest and easiest forniat to type in. 

To key in hcsdumps. you musi lirsi enter ihe nmniinr: 

CAl.i. -151 

Now key in ihe hesdump enaeil) as n appears in the 
magazine ignoring the four digit checksum at the end 
of each line (a ""S"' and four digils) If you hear a beep. 



you will know ihai you have lyped soiiielhing 
meorreetly and must retype that line. 
When finished, return 10 BASIC wiih a: 

E«i«.\(; 

Remember to BSAVF the program with the correct 
lilenume. address and length panuiieiers as given in 
the article 

Keying tn Source Code Ihc source code 
pirtion of a iiiachine l.uiguage program is provided 
only III better evplain the program "s operation If you 
wish to key it m. you wilt need an assembler The 
S-C Assembler is used to generate all source code 
prmied in Hardcoa- COMPUTIST. Without this 
a.sMimhlcr. you will have lo translate pieces ol ibe 
source ctxJe into something yimr a.sscmbler will 
understand. A table of S-C A sscni bier directives just 
for this purpose was printed in Hardcore 
COMPI'TIST No. 17 Tti trartslate souax* cixle. you 
will need to understand the directives of your 
assembler and convert the dia-clnes used in the 
HHircc tode listing to similar directives used by your 
assembler. 

Computing Clteek.vum>> checksums are lour 
digit hexadecinial numbers which senfy whelheror 
not you keyed a program esactly as il was pruned 
in Hardeorr COMPUTKST There are two lypes ot 
checksums one created by the CHFCKBIN program 
(for machine language programs) and the other 
created by the CHKCKSorf program (tor BASIC 
programs I fioih programs appeared in Hardcore 
COMPUTIST No I and The BesI of Hardcore 
Computing. An update to CHECKSOFT appeared 
in Harilcore COMPLl"nS!" No. IS. M the checksums 
these pn-igrams create on your computer maich ihe 
checksums accompanying the priigram in the 
maga/inc. then you keyed in the program eoixectly . 
if not. Ihc program IS incorrett at the line w here ihe 
first checksum differs. 
I J To compute CHF.CKSOFT chwksums: 

LOAD filename 

BRU.SCIIECKSOFT 
Gel the checksums with 

& 
And correct tbc" program when.' the c"hecksums diller 
21 To compute CHF.CKBIN checksums; 

CAI.l. -151 

BI.OAU niename 
In.stall CHECKBIN at an out of the way pliice 

BRLLN CHECKBIN.AS6WNI 
Clei the checksums by typing Ihe sianing address, 
a period and ending iiddrcss ol ihc flic followed bv 
aDS- 

X«l!S.NSl\dS 

And earrcet the lines at which the checksums differ. 



How-To's 
Of Hardcore 

Wekonie to lhti"di.ure COMIHITIST. a 
puNicalitm devolerl tit Ihe seriou.s user or 
Apple II and .\pple |[ compatible eonipulers. 
Our niuj4ti/inc etiiitains infnniiatitin you are 
nut iilst'ly 1(1 rind in any of Ihe other major 
juurnah dedicated to llie .'Vpple nmrkel. 

Our editorial polity is thai we do NOT 
eondone soft « are piracy, hut we do helieve 
that honest u.sers are entitled lo hackup 
comniereiai disks they hu\e purehused. In 
addition to the security of a backup disk. 
the removal orei>py protection gives Ihe user 
the option of modil'viit^ uppliealiun 
prtiurams lo meet his or her needs. 

New readers are ad v ised to read Ihis pujje 
carerulh to avoid frustration when 
altemptinf; lo t'i>llovt a softkey or when 
entering Ihe pro^rums printed in this issue. 



1 



this is... PAGE ONE 



coming soon... 

DEAD OR ALIVE 

The Must Warned List Lomes alive as separaied posters scattered through the pages ot 
the COMPUTIST, We're not just wasting space, we're offering bountiesi You'll see 
)ots of WANTED posters with publicly announce^l REWARDS for softkeys to certain 
not-yet-unlfK'ked software! Be a bounty hunter and earn your rewards now by 
becoming a hard-core COMPUTIST softkey author. 

TIME TO RENEW? 

Check your mailing label to see it you need to renew your subscription. And if you think 
you might forget when thai fatal time arrives, renew right now. Just use the order blank 
below. 

BACK IT UP OR BUST 

If you aren't a subscriber, then maybe you need to find out more about the plague of 
copy-protection that is turning your valuable software library into a collection of 
inpenetrable, mysterious black boxes that stop working at the wrong times when the nearest 
backup is weeks and doilars away. 

NEW SUBSCRIBERS! 

You've just joined the ranks of concerned software users who arc ensuring that the software 
they use is copy-corrected, copyable, and user-useful. No need to depend on the inflated 
back-up co.sts charged by the makers of your software, make your own back-up. and 
even remove the often lime-corLsuraing boot-up delays caused by copy -protection. In 
other words. Welcome aboard. You'll find every issue packed with softkeys. hardcore 
user and programmer articles, and even some relaxing entertainment. 

IF YOU'RE MOVING... 

Let us know right away or at least 30 days in advance so that you won't miss a single 
issue. Just Write your new address here, and paste your present address label in the 
order form below and send it to us. 



My new address is: 

City 

Phone 



. State . 



- '^'P - 



USER SURVEY 

D I Love Copy-protection 
and I hope that you 
naughty hackers stop 
publishing your rag! 

D I want to make legitimate 
copies of the software 
that I own but I am 
unable to do so. 

D I want to get rid of any 
and all computer code 
that prevents me from 
using my property the 
way I want to use it. 

D I hate Copy-protection 
and will do anything in 
my power to get rid of 
this scourge. 

D I find that locked-up 
disks present an 
intellectual challenge 
and user-barrier that I 
must overcome. 

D I am a software pirate. 

D 



Ail ptirpo.se Subsciption. Renewal, change -ol -address, and survey form. 



Name. 



HC:5 



Address 
City , . 



State 



Zip_ 



Phone 



Signature _ 
VISA/MC 



Exp, 



Send check or money order (US funds drawn on US bank) to: 
Hardcore COMPLTIST, PO Box 11084<i-T, Tacoma. WA 98411 



D RENEW subscription 
D NEW subscriber 

SUBSCRIPTION RATES: 
(for 6 issues) 

D US $20 
D US 1st class $24 
n Canada, Mexico $34 
G Foreign $60 

SAMPLE COPY: 
LI US $4.75 
D Foreign $5.75 



Jt 



Cfiristiruis SpeciuCs 




OFF 




The Book of Softkeys Volume I 



This coupon is valid only for current subscribers of Hardcore COMPUTIST, 
This coupon can be applied to the purchase of the product named, resulting 
in S5 off the current price only. Expires December 31, 1985 

see advertisement on the back cover 



$5 



OFF 




This coupon is valid only for current subscribers of Hardcore COMPUTIST. 
This coupon can be applied to the purchase of the product named, resulting 
in $5 off the current price only. Expires December 31, 1985 

see advertisement on the inside of the bacl< cover 




OFF 




The Diskbusters T-shirt 



This coupon is valid only for current subscribers of Hardcore COMPUTIST. 
This coupon can be applied to the purchase of the product named, resulting 
in $2 off the current price only. Expires December 31. 1985 

see the advertisement on the inside of the back cover 



for 




Hardcore Computist Library Disks 



This coupon is valid only for current subscribers of Hardcore COMPUTIST. 
This coupon allows you to purchase three (3) Hardcore Computist Library 
disks for only $20. Expires December 31, 1985 

see advert isement on page 32 



IF 



you're a 
subscriber, 

THEN 

you can 

SAVE 

lots of $$$ 




^ sorry, 
no savings 

.OR 

5 You can 
subscribe! 



INSTRUCTIONS TO SlUSCRIBERS 

JuM include these coupons with your 
regular order (see appropriate 
advertisement in this or last issue) along 
with your subscriber number or mailing 
sticker and deduct the appropriate 
savings. These coupons arc good till the 
end of 1985, so if you're not yet a 
subscriber, or you forgot to renew, use 
the form on page one and you'll be a 
subscriber, too. Then you. too. can take 
advamage of these holiday savings! 




Hardcore 



Issue 25 



KIGALI 



Hotel 
Library 



Kigali, the largest 
cily in the easl 
i;(>nlrdl African 
<;oufitry of 
I Rudnda, hds a 
I papulation o( 
1 50,000. 



See connections 
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Investigate 
Uisit Interpol 
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This moHlh 's covtr: 



Grof^csfrom DLM's Shape A Color 



Addfees all ad^rttafng IrKiuirles to HBrdoors COMPUT1ST, 
AdvortlBJng Oepartmenl. PO Box 1 1 0Slfi. Tacoma, WA 9641 1 . 
Mail mBHUScnpts or r«quesi& for Wrrler's Quirfe* to Hafdcore 
COMPUTIST, PO Box 110e46^K, Tacoma, WA 98411 

Return poBlBB^ ^^^ accompany aH manud^ripla, drawJnQ^, 
p^iotos. ctLskfl. or lapes \f they are to be returned Unsolicited 
manuscripts will t>e reEurhed only hf adequate return postage js 
Included. 

Entire contenls copyflghl 198S Oy SoftKey PubHshmg. All 
tig/h^ reserved. Copying done tor other than parsonsy or internal 
relerence ^without express written pefmisslon from Ihe pubfjaher] 
is prohibited 

The editorial staft assumes no natality or ras^KHiaibllity for the 
products advertldEKt in the magazine Any opinions expressed 
h^ Ehe authors are not necessarily those 0l Hardcm« 
COMPUTIST magazine or SoftKey Publishing. 

App]e usually Thiers to ttie AppJe ]j or \[ Plus Computer, and 
i» a trademark of Apple Computers, Inc 

SUBSCRIPTtONS: Rates (for e issues] ; U.S S20, US. 1st 
Class S'24Xanada& Mexico £34, Foreign S60. Direct inquiries 
to: Hardcore COMPUTIST, Subicflptlon Dttpdrtmant PO 
Box llOM^r Tdcomo. WA 9ft4ir Please inducfe addrt^^s 
label with correspondence. 

DOMESTIC OEAUEn RATES: Call (206) 474^750 tor more 
Intofmation. 

Change Of Addrtfsa: Please allow 4 wae^a for change el 
address to take etiect. On postal Form 3576 supply your ne^ 
address arid your most recent address label. Issues mtssed due 
lo non^recelpt of chartQe of addrvas may be acquired at the 
reguiar back tasu? rate 
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softkeys 

10 OB Master 4.2 and Business Writer 

Super lOB comes through again by softkcying these Stoneware programs by Clay Harrell 

12 Another DB Master 4-f- deprotection 

With this article, you are invited to take another look at the popular data base program used 
by several small businesses by Anthony L Bamen 

13 Barron's Computer SAT 

Start studying now for the Scholastic Aptitude Test with your freshly broken copy of Barrens 
Computer SAT. compliments of Hardcore COMPUTIST & Super lOB. by derm Schmottlach 

14 Take 1 

Take actions toward the removal of copy protection from this graphic program. 
by Clay Harrell 

24 Banlc Street Speller 

Use the built-in copy program of this popular spelling checker to make as many copies as 
you need, by Jeff Lucia 

25 Where in the world is Carmen Sandiego? 

Follow Hardcore COMPUTIST as it tears into the copy protection on this recent Broderbund 
release, by Ronald Wilson 

26 Bank Street Writer 128K (//e & //c) 

The gigantic softkeying machine crunches yet another version of this popular word processor. 
hy Jordi Le Vant 

28 Word Challenge 

Hayden's Word Challenge proves to be no challenge to Super JOB. by Larry Jasonowiez 

feature 

20 Adding "If Then Else" to Applesoft 

Give your Applesoft programs a third decision making choice, use ELSE statements with 
this article by Joftn R. Vokey 

Core 

16 DOS to ProDOS and back 

This single drive solution to inter-DOS file transfer uses a specially created diskette that 
contains directories for both DOSes by Brian K. Chinn 

departments 

4 Input 

6 Most Wanted List 

7 Readers* Softkey & Copy Exchange 

Softkeys for: Penguin's Spy's Demise by Danny Pollak. Human Edge's Mind Prober 
by Michael A. Coffey, Sierra On-Line's EC's Quest for Tires by Danny Pollak, DLM's 
Early Games by Greg Prior, Sierra On-Line's Homeword Speller by Nick Galbremh. 




Please address letters to: 

Hardcore COMPUTIST 

Editorial Department 

PO Box 110846-K 

Tacoma, WA 98411 



Include your name, address and 
phone. 

Correspondence appearing in the 
INPUT section may be edited for 
clarity and space requirements. In 
addition, because of the great 
number of letters that we receive and 
the small size of our staff, a response 
to each fetter is not guaranteed. 



6) Turn the initted disk over and copy all fsies 
from the second side. 

Squire Step by Step 

To deprotect Squire follow steps 1 -6, except 
that the HELLO program in step 2 should read 
as In I lows: 

10PRINTCHR$(4) "HAXFILESS" 
20 Pfi I NT CHRJ ( 4 ) '■ BRUNajROOT . 8AS" 

Also, most EDUWARE programs can be 
deprotected usmg SUPER lOB 1.5 with the 
NewSwap controller installed. ExLcpt for 
Reiulez^'ous. the copied programs will run 
without ftirther alteration. 

Charles Taylor 
Los Angeles, CA 



with a short program or something to set the 
clock. Any help or information would be greatly 
appreciated. Thanks for any help. Keep up the 
good work with the best magazine available to 
the Apple user. 

Greg Pouln.s 
Detroit, MI 

Mr. Poulos: Wliiie ! cannot offer you a program 
for selling your clock. I con offer some 
information. Firs! of all, U> turn off the other 
cards ami turn on your mountain rani, do tin 
"X = PEEK (53247) + PEEK (49152 + SLOT 
*256} where SLOT i.v equal to the .ilot where 
your card w. You must then POKE the values 
for the time vou want into memorx addresses 
38304 ($9S.m tinough 38315 i$9SABi and do 
a "CALL 38316". 



Spiradisk Info 



Squire Meets Millionaire 



Mr. A. L. Head's letter on dcprotecting 
Miiiionuire in Hardcore COMPUTIST No. 21 
gave me the clue I needed to deprotect Squire 
and Baron. The necessary information is 
contained in the Basic file CDDNC. The llle 
CDIINC contains inverse characters after each 
non- inverse letter. (Inverse C follows C, 
Inverse D follows D. etc.) By reading this file 
with Copy }j Plus. \ discovered that Squire 
requires a MAXFILES 5 command, followed 
by BRUN SQROOT.X, and that Baron uses 
MAXFILES 6. followed by RUN 
BARINIT.BAS. 

Baron Step By Step 

1) Init 2 sides of a disk with a Basic program 
named HELLO. 

2) Load the system master, type NEW, and 
enter the following program; 

10 PRINT CHRJ (4) "MAXFILES 6" 
20 PRINT CHf?S(4) "RUNBARINIT BA5" 

3) Insert the front side of your previously 
INITted disk. 

4) SAVE HELLO. 

5) Using Fid or Copy lf+ , copy all files e.Kcept 
ENTRA. CON, and CDIINC. 



Responding to my article in Hardcore 
COMPUTIST No. 21 on quarter tracks, M. M. 
MeFadden informed me of the existence of the 
so-called "spiradisk" that u.ses quarter-track 
increments for track arcing. By obtaining a copy 
of such a di.sk (Frogger by Sierra ON-LINE) 
1 was able to verify that he wa^ right. Since 
parameters using quarter tracks can only copy 
disk data that is a half-track apan. the 
"spiradisk" cannot be copied by the current bit- 
copiers. Fortunately, the new Apple l/c 
hardware implements a delay between 
commands to the stepper magnets which 
prevent one from accessing quarter tracks 
accurately. Thus the "spiradisk" has gone the 
way of DOS 3.2. thank goodness. Plea.se refer 
to my anicle in Hardcore COMPUTIST No. 
21 for more information on quaner tracks. 

Bruce W. Jones 
Pueblo. CO 



Setting a Mountain Clock 



A year and a half ago, before I moved to 
Brazil, I purcha.sed a Mountain Clock Card for 
my Apple //e. I got this on sale and it came widi 
no software to set the date and time. I have had 
it all this time with the wrong date and no way 
to set it. Docs anyone know how to set this 
clock? And, if so, put a letter in this column 



Handling the New Handlers 



In partial reply to Michael Mullin's problems 
with Vie Handlers: a letter to ALS at 1 195 E. 
Arques Ave. Sunnyvale, CA 94086 and a check 
for $1 5.00 sent with his old Word Handlerdisk 
will get him an updated version of that great 
little word processor. The new version is 
copyablc with Copy If Plu.\ ij. with the built- 
in auto-copy routine. He may want to call 
technical assistance at 1 -408-730-0307 between 
9:00 and 3:00 to get authorization to have the 
whole Handlers package updated. 

If he gets the new package he will find a new 
"Tutorial Disk" When he boots the backside 
called, "Tutorial Dtx.urnents", he will get a 
utility to conven the proprietarj- files to DOS 
3.3 text files for transmission by modem. 

Keep the magazine coming. Right now I am 
especially enjoying the Graphic Grabber v3.0 
from Hardcore COMPUTIST Issue No. 20. 
Lots of great programs and tips, 

P.S. I am still looking for help making 
backup copies of Milliken Comprehensive 
Power Programs and Borg Warner 's College 
Entrance Exam Preparation 

D. J. Ward 
So. Williamsport, PA 

Mr. Ward: Joel Husc 's article on iiacking up 
the College Entrance K\am Prep in Hardcore 
COMPUTIST No. 21 might he what you 're 
looking for. 
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A Nutritional Softkey 



The following is a softkey for The Dine 
System, by D. Dennison, 724 Robin Rd, West 
Amherst, NY 14228, (716)688-2492, 

This is a nutritional plan which is designed 
to improve personal eating behavior, with an 
extensive database of over 3500 foods including 
many brand name items. It is an excellent 
program, but I desired to modify the basic 
program to include more fartors in determining 
daily nutrient requirements. The program disk 
is copyable with a bit copier, but the program 
cannot be accessed normally. 

Using Softmove, a utility which comes with 
the Repiay U card, I was able to move the 
Applesoft program to standard DOS 3.3. 
Listing this program allowed me to discover the 
protection used. There is an additional catalog 
on track 10, which is accessed by 3 POKE 
Statements: 

POKE 44»33,ie 
POKE 47445, 1 7» 
POKE 47455,213 

After making these pokes in DOS 3.3, 
LOAD each file from the program disk, return 
the addresses to their normal values: 

POKE 44«33,I7 

POKE 47445,213 J 

POKE 47455,17» 

and SAVE the file onto another formatted disk 
with a normal DOS 3.3 or fast DOS on it. 

Then, as you make your modifications to 
Dine, modify all pokes to diese addresses to the 
normal values given above. 

I hope this may be usefiil to someone who 
needs to modify this already good program. 



Jason Chao. 
Cleveland Hts.. 



MD 
OH 



through a title page and quite a bit of disk 
reading, a copy of the program will jump into 
the monitor at $1702. It sure takes its time 
before deciding that it is a copy. 

However, the copy protection is really quite 
minimal. By booting Dos 3.3 from a normal 
disk, Mickey's Space Adventure can be 
CATALOGed. ("Which is only die beginning of 
the simple-mindedness of their protection.) 

In the catalog is an Applesoft program with 
the very suspicious title of BOOT. By loading 
this program I found that it ran MICKEY- 
CODE at S4tm. 

I typed MONICO (so that DOS commands 
will be echoed to the screen) and ran BOOT. 
The computer obligingly displayed each loaded 
program module and, in most cases, even 
showed where in memory it was loaded. Since 
MICKEY-CODE was the only BRUN program 
(all others were BLOADed) I staned my search 
there. 

At $4000 there was a JSR (jump subroutine) 
to a routine that displayed a "PLEASE WAIT" 
type tnessage, BLOADed the otter modules and 
kindly returned to where it came from. The 
main routine then set up some pointers and 
such, called a routine at $1572 (which I 
considered very close to where the whole thing 
blew up when booting) and then jumped 
somewhere, 

I removed the JSR S1572 with NOP (no 
operation) instructions and gave it a 4000G fi'om 
the monitor. The program loaded without any 
trouble. Apparently the subroutine at $1572 did 
some nibble counting on the data that normally 
brought the boot process to a grinding halt. 



Step By Step 

1) Copy Mickey's Space adventure with 
COPYA. 

2) Boot DOS 3.3. 

3) LOAD BOOT from the copied Mickey's 
Space Adventure. 

4) CALL -151 to enter the monitor. 

5) 401 4: EA EA EA to reinove the subroutine 
call. 



A Mickey Mouse Protection ^ ^save mickey-code, a$4000, L9728. 



Mickey 's Space Adventure by Walt Disney 
and Sierra On-tine is a game designed for 
beginning adventurers (especially kids), giving 
the player options to select instead of the 
Standard, two- word input style. 

The disk can be copied normally except that 
the program doesn't quite run. After going 



That's it! 



Gary Kowalski 
Anaheim, CA 



P.S. My vote is to keep Hardcore 
COMPUnST for the Apple ][ family only. Too 
many magazines allocate space for the MAC. 
There already are magazines for the MAC and 
more will spring up. 



A Quick Pop Into tlie Monitor 



1 love your magazine. I'm sending money to 
renew my subscription. You can reset into the 
monitor on any apple by using a 100 ohm 
resistor and connecting it to pins 26 and 29 of 
any slot. This causes an NML 

Brian Snook 
Riverside, CA 



Running the CIA on a //c 



We advertise a product called the CIA with 
your magazine and have done so, for quite some 
lime now. It has come to our attention that a 
small patch is necessary to run the CIA on the 
Apple lie. 

The patch is given below in the hope that you 
may print it as a press release in Hardcore 
COMPUnST. This would benefit many of 
your readers who have ordered the CIA from 
us over the past year or so. 



TRICKY DICK: 

If program is in memory, change: 

Bl to m at $1392 

If program is on disk, change: 

Bl to 98 at Track 15 Sector 05 Byte 83 

TRACER: 

If program is in memory, change: 
50 to n at $8980 

If program is on disk, change: 

5« to 7« at Track IB Sector #9 Byte 87 

Many thanks in advance. 

Golden Delicious Software 
Chelsea, England 
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Know of any Knowdrive 

Prospects? 



In Hardcore COMPUTIST No. 20, you have 
a review of a 128K memor>' board called '■The 
Know Drive". In this review it was stated that 
you can get thetn for less than halF-off by getting 
a user group buy together. Well . I tried to do 
this at my local user group, but only a few were 
interested. Therefore. I was wondering if you 
knew of anybody who is getting a large buy 
together? If so, please give nic their names and 
addresses, or you can give them mine. If you 
don't know of any, then please put my name 
and address in your magazine and I will try to 
put a buy together. 

Also, 1 have been Uroking for information on 
X and K modem protocols but haven't seen a 
thing. (These are standards in which computers 
send files over modems). If you people know 
or can find out about them, whv don't you write 
an article about them in the core section? 

Finally, here are a few adventure tips for you 
on The Dark Crysntl: 

Locked gate giving you a problem. Fizgig 
docs more than grrrr. 

Riddle troubles, moss covered rocks help. 

Sharp rocks are a big help to get things 
floating along. 

Richard Blair 
12252 Manning Place 
Mcdway, OH 45341 



Various Cracks 



Here's a few programs that I have cracked. 
You might want to pass them on to your 
readers. 



DINOSAUR DIG 
by CBS 

Use SWAP controller or do a CALL-151, 
B942:!8 and copy with COPYA. 

OPERATION FROG 
by SCHOLASTIC 

Same as DINOSAUR DIG. 



STELLAR DEFENSE 
by RAINBOW COMPUTING 

To copy this popular Shir Trek game, first 
copy nomally with COPYA or LS fast copy. 

1) Boot the copy, immediatciy hit Ofl or 
reset. 

2) LOAD the program called "DRIVER" into 
memory. 

3) LIST line 506 of DRTVER, it should 
read; CALL 15953. 

4) Type in 506 and hit reitim to erase this line 
from the program. 

5) SAVE DRIVER back to the disk. 

You are now the proud holder of an 
unprotected copy of Siellar Offense. 

MAGIC SL.4TE 
by SUNBURST 

To back up this very good word processor, 
use Copy jl Plus v5. 0. Now go back and BIT 
COPY "Track I keeping the track length. 

William Forsyth 
New York, NY 



The Quicker Aux 



A few issues ago, a method was pre.sented for using 
the Apple extended 80-coIuniii card on an Apple '/c 
for cracking. The article used .several small programs 
to manipulate the auxilary memory. However, it is 
much easier to da this: 

1) Boot Dos 3,3 

2) Type 

CALL -ISl 

e:8D W C» 8I> 85 CB 4C M C6 

3) Insert disk to boot. 

4) Type 

«G 

When the disk is done booting insert a normal DOS 
disk and hit jdUd reset. Next, drop into the monitor 
(CALL -151) and type this: 

3fle:l8 4C 11 C3 3F8:4CM83 

This causes the i3Y| lo move aujtilary memory 
into main memory. Now type 

8M<96M.BFFF!BY1 

This moves the DOS and RWTS into tnain 
memory slaning at $800, 

Steve Dietz 
Arlington, TX 



Most 

Wanted 

List 

Need help 

backing>up a particularly 

stubborn program? 

Send us the name of ihe progrcim and its 
manufacturer and we'll add it to our Most 
Wanted List, a column [updated each issue) 
which helps to keep Hardcore COMPUTIST 
readers Informed of the prtigrams for which 
softkeys are MOST needed Send your 
requests to: 



Hardcore COMPUTIST 

Wanted List 

PO Box n0846-K 

Tacoma. WA 98411 



If you know how to depvotect 
unlock, or modify 
any of the prograrns below, 
let us know You'll be helping your fellow 
Hardcore COMPUTIST readers and earning 
MONEY at the same time. Send the 
Information to us in article form on a DOS 
3.3 diskette. 



Mouse Calc Apple Ccinipuier 

Appir Business Graphics Apple Computer 

Fligjit Siuiultnnr M Sub Logic 

Factory Sunbursc Ctinimunicating 

Jane Arktronics 

BiKilii'iiili Sensible Software 

Vlvihltnil Mitrolah 

SundBB FTL Oumi.-. 

Sund«K, \1 FTL Conici 

Lifocaver iVIit'rnlub 

Catalyst Quark. Inc. 

Gulenhurg Jr. & Sr. MKTomulion LTD 

Prime Pinner JVimesoft Corp. 

ZardsuL Ciimpwcr Solutions 

Thi' llandkr^ Silitim Valley SyMfms 

Milllken Math SiTles jNEWt Milliken PublLilung 

The .Apple's Cort; Parts 1-3 The Professor 

Klng't (Juest Sicrru On-line 

Hayes Terminal Program Hayes 

Fun Bunch Unitorn 
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reader!' lofftkey & copy exchange 



Danny PoUak 's Softkey for. . . 



Spy's Demise 



Spy 's Demise 

Penguin Software 

8M Fourth Ave. 

P.O. Box 311 

Geneva, IL 60134 

Requirements: 

Apple ]| Plus or equivaieni 

A blank iniiialued DOS 3.3 disk 

Spy's Demise 

Spy's Demise is a game from Penguin 
Software in which you, ihe spy, must traverse 
the floors of the tliplomatic mission in 
Pyongyang and gather pieces to a message 
which is the key to a fortune in valuable 
computer data. 

The program occupies tracks through 12 
with alternating address headers of D5 AA 96 
and D4 A A 96, We can use a boot trace to load 
in the entire file and then exit to the Monitor. 
Here's how it is done. 

The first thing we need to do is to load in 
Booil from the Spy's Demise disk and then re- 
enter the monitor. Insert the Spy's Demise disk 
into drive 1 and then enter the following: 

CALL-lSl 
96W<C6ee.C7»«M 
96FA:98 
9M1:4C S? FF 

yOWWvr 

Booil has now been loaded into page 8 of 
memory. We will now alter our code at $9600 
so that it will load Bootl at $1800 and jump 
to the Bootl at $800. 

9«59:18 
%FA:«8 

If we examine the code starting at $801 . we 
see that it loads some code into memory, sets 
up the reset vector, loads the x- register with the 
value stored at $2B (slot number times 16) and 
then jumps to the load routine at $0700. We 
can alter this code so that it will exit to the 
Monitor before jumping to the routine at $B700. 

8§C:9e 
84D:FF 
84F:59 
8A4:4C 59 FF 

If we now examine the code at $B700. we 
see a jump lo $6000 at $B734. Alter this code 




Michael A. Coffey's Softkey for. 



so that it will exit to the Monitor instead of 
jumping to S6006 by entering 

B734:4C 59 FF 

Load the x-register with $60 and execute the 
code at $B700 by entering 



31 

•.m m 

B7MG 

The rest of the program should have been 
loaded and you should now be in the Monitor. 
The program resides in memory from $4000 
to S8DFF. We will fill memory from $8E00 
to 8EFF with $00 's and save this extra page of 
memory with the program. The extra sector that 
results in our binary file will be used to store 
the high scores. Boot the initialized disk and 
then enter the following: 



CALL-lSl 


3F04:AD EC B7 8D 


3F08 


EE 80 AD ED B7 8D EF 80 


3F10 


AD 50 C0 AD 52 C0 AD 55 


3FI8 


C0 AD 57 C0 4C 00 60 


SEWrfte 


8Eei<8E»e.8EFEM 


88D4:2e ee BD 6» 


BSA1 


/E SPY'S DEMISE,A$3F»4,L$4FFB 



And there you have it. A completely 
unprotected copy of Spy's Demise. Here are 
a couple of APTs you can use. 

Start with any number of spies: 

69AB: (number of men) 

Infinite number of spies: 

6D8A:EA EA 

These are neither all of the APTs, nor are 
they the best. Have fun finding your own and 
good luck on d^oding the message. 

i 



Mind Prober 



Mind Prober 

Human Edge Software Corp. 

2445 Faber Place 

Palo Alto. CA 94303 

$49.95 

Requirements: 

Apple ][ 

COPYA or Super lOB 
Both sides of a blank disk 
Mind Prober disk 

Mind Prober is a fascinating research based 
program that provides you with a profile of a 
person. The outcome of the profile depends on 
your accuracy in answering the questions. The 
results can leave you confounded in their 
preciseness or seem so far out of line so as to 
be laughable. In using the program, my subjects 
felt that most of die conclusions were correct, 
sometimes to the point of being frightening, I 
suspect that it is the use of the program on those 
you don't know well, or those who tie when 
answering the questions that accounts for the 
occasional "it's only a party game" attitude. 

One fault I have with the program is the 
$9.95 charge to provide you with a backup. 
Since I'd rather make my own anyway, I set 
about to do so. The program appean lo be 
protect! on less, and none of the popular bit 
copiers seem to work. Nevertheless a backup 
can be made can be made with little trouble 
following these steps: 

1) Make a copy of both sides of Mind Prober 
using either COPYA or Super lOB with the 
standard controller. 

2) The turnkey program is called HELLO and 
it is this we must modify. Under normal DOS 
and side one of die copy of the drive, type 

UNLOCK HELLO 
LOAD HELLO 

3) Get rid of ai! the lines before 4000 by typing 

DEL 3«12,3e6« 

4) Save and lock the new program. 

SAVE HELLO 
LOCK HELLO 

You now have an enjoyable and deprotected 
disk, Happy profiling. 
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readers' softkey & copy exchange 




Danny Pollak 's Softkey for. 



BC's Quest 
For Tires 



B. C. 'j( Quesi Fur Tirex 

Sierra On -Line, Inc. 

1039H Rovkhinlmin Dr. . Sic. 12 

Smramemo. CA 95827 

$34. 95 



Ki^quirtiiiunls -. ^ 

48K Apple 11 

B.C/s QucM For Tires 

A blank disk 

B.C. 's Quest For Tires is a game fmm Sierni 
On-Line. UnfortunatL-ly. like their other 
software, B.C.'S Quest For Tires is cop> 
proiened. 1 have not been t'oriunmc enough to 
see the "Sierra On-Line softkey'" which I have 
seen mentioned in several of the late.st issues 
of Hardcore COMPUTIST. For tliat reason, 
here is my methixl of breaking Quest For Tires. 

The copy protection used on B.C.'s Quest 
Fur Tires is the same as that on the other games 
by Sierra On-Line I have seen. Hopefully, this 



method can be used to uniiKk other Sierra On- 
Line software. 

J) Prepare a slave disk with a deleted HELLO 
program. If vou want, use the name EC'S 
QUEST FOR TIRES. 

IMT HELLO 
DELETE HELLO 

2) Boot the original B C 's Quest For Tires 
disk. When the prompt appears, hit the re.set 
key (you have to be fast). If this docs not put 
you into Applesoft, then repeat step 2 until you 
do get in. 

3) Get some of the code from the disk and move 
S8(W^8FFoui of the way. 

BLOAD X.A$4«««,L$2(W»,B!f(tBee 
BLOAI> V.A$(t8»W,L$38»«,B$B7»8 
CALL- 151 
6«B«<8Wt,8FFM 

4) Insert yom initialized disk in drive one and 
rebiwi. 



PR#6 

5) Restore 



-8FF and save to the new disk. 



CALL- IS 1 
8«»<6«te.6eFFM 
BSAVE XY.A$8«e.L$58fle 

6) Repeat step 2. 

7) Get some more code from Quest For Tires. 

BLOAl) Z,A$6»«e.LWAfle,B$e3W 



CALI -151 

16««<96»«.99FFM 

BLOAD W,A$2««8,LS4e»fl,B$flDfl» 

8) Insert your initialized disk in drive one again. 

PR#6 

9) Type in the following: 

BSAVE W,A$2IWe,L$4»tl» 

MAXFILESI 

CALL-151 

%(W<I6»».19FTM 

BiOAD XY 

7iD:4C F5 19 

97A0:AD 55 C0 20 A9 97 4C CA 
97A8 97 A0 00 B9 67 97 2B ED 
97S0:FD C8 C0 10 D0 F5 60 8D 
97B8.34 C2 CC CF CI C4 A0 C2 
97C0:C3 A£ C8 C9 C7 C8 8D 

97CO;4C EB 97 

97E8:EA EA EA 

\%) Tell DOS to allow binary files up to SFFFF 
in length so you can save a huge file, 

A964:FF 

BSAVE BC.OB.),A$7FDX$92»3 

11) Hang in there, you're nearly done. Type 
in the foilowina: 



BLOAD VV 


2»31:4C DF 2B 


20AA:20 B0 20 4C DF 20 


20B0:A0 00 69 BE 20 20 ED FD 


20B8:C8 C0 IC D0 F5 60 84 C2 


20C0:O3 CI 06 C5 C2 C3 AE 08 


20C8:C9 C7 C3 AC CI A4 S2 80 


20D0:B0 B0 AC CC A4 B4 B0 B0 


20D8:B0 8D 


20EC:A9 19 8D 86 


20F0:1C A9 lA 8D 06 IC 


BSAVE BC.HICH,A$2«t»tt,I,$4««e 


11) Enter this Applesoft program. 


FP 



10DJ = CHRi( 13) +CHR$( 4) 
20HGR : POKE -16302 ,0 
30 PR I MTDS" MAXFILESI" 

40 PRINT DS"BRUN'6C OBJ" 

SAVE BC'S QLEST FOR TIRES 

12) Delete the extra files vou made, leaving 
only BC'S QUEST FOR TIRES. BC.OBJ, and 
BC.HIGH. 

DELETE XY 

DELETE W ■ - 

Now you are off and rolling with a totally 
unprotected version of B.C.' s Quest For Tires, 
You can also put the files on yctur favorite game 
disk, A fast DOS will help immensely. 

' 4m 
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readers' loftkey & copy exchange 



Greg Prior's Revisted Softkey for. 



Nick Galbreath 's softkey for. , 




controller 



Development Learning Materials 

1 DLM Park 

Alien, TX JSmi 



Requirements: 

Apple ][ Plus or equivalent 

Minus Mission or Meteor Multiplication 

Super lOB vl.2 

A blank disk 

in Hardcore COMPUTIST No. 13. a DLM 
softkey appeared that doesn't seem to work on 
the new releases of DLM software. Could it be 
that DLM might have a subscription to 
Hardcore COMPUTIST and changed the 
protection scheme on at least some of their 
disks? Specifically, the ones I found changed 
were Minus Mission and Meteor Multiplication. 

[t would seem that they have dropped the 13 
sector format and have altered the address and 
data epilogues from the normal DE A A to DA 
AA. Now, This would seem to be an alteration 
that wouldn't be worth the trouble, until a slick 
little utility like Bag of Tricks returns "unable 
to interpret data' ' on at least half of the tracks. 
This is caused by the first byte of either the 
address field or data field prologues appearing 
to be sync bytes, Hmm, it seems that they're 
a bit more devious than appears at first glance. 

Anyway, type in the Super lOB controller 
that follows (by the way, it was generated by 
the Controller Writer from Hardcore 
COMPUTIST No. 16). and proceed as follows; 

1) Install the Controller into Super lOB using 
your favorite method. 

2) INITialize a blank disk with a normal or fast 
DOS using the name of the original disk as the 
hello file. (ex. for Minus Mission, type INIT 
MINUS MISSION) 

3) Run Super lOB to make the copy onto the 
freshly INITialized disk and presto-chango! a 
COPYAable DLM program. 

If you look at the controller, you will notice 
that tracks through 2 are not copied from the 
original disk. We don't really want to copy their 
DOS, do we? 

Note: if this method does not work for these 
or other DLM programs, you can try using the 
Swap controller and the RWTS from the 
offending disk. 



1000 REM NEW DLM CONTROLLER 

1010m=3 ;LT = 35 :CD = *ifR :MB= 151 : ONERRGOTO 

550 
1020 ST = :T1 = TK : GOSyB450 : RESTORE . GOSUB 

190 : GOSUB 210 ; GOSUB 170 
1030 GOSUa 430 : GOSUB 100 : ST = ST + 1 : I F ST < 

16 THEN 1030 
1040 IF BF THEN 1060 

1050 ST = ;TK = TK + 1 : I F TK < LT THEN 1030 
1060 GOSUB 230 :TK = T1 :ST = : GOSUB 490 
1070 GOSUB 430: GOSUB 100 :ST = ST tl : IFST< 

16 THEN 1070 
1080 ST = :TK = TK+1 ; IFBF = 0ANDTK< LTTHEN 

1070 
1090 IF TK< LTTHEN 1020 
1100 HOME :A$= "ALL' DONE" GOSUB 450 ; END 
5000 DATA 213 ,170 ,150 ,213 .170.173 .218,170 

,218 170 

controller checksums 



Homeword 
Speller 



Homeward Speller 
Sierra On- Line Systems 
36575 Mudge Ranch Rd. 
Coarsegold, CA 93614 



Requirements: 

Apple |[ 

COPY A or equivalent sector copier 

A sector editor 

To crack the spelling checker, copy the disk 
with COPYA, then get out a sector editor and 
change the following: 



1000 - J356B 

1010 - $5E3F 

1020 - $B92C 

1030 - JE2AA 

1040 - S2463 

1050 - JE29C 



1060 - $6AE6 

1070 - J22FD 

1080 - $54D8 

1090 - $7FC2 

1100 - JF952 

5000 - $EF9F 



TRK SEC BYTE FROM TO 




1 7 see $20 J4C 
1 7 JC9 S12 JDC 




i 
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Beating Stonenirare's... 



DB Master v4.2 



By Clay Harrell 



DB Muster 


4.2 


DB Master 


Business Writer 


Stoneware, 


Inc. 


50 Belvedere St. 


San Rafael 


CA 94901 



Requirements: 

At least 64 K (required by program) 

At least one disk drive 

Super lOB vl.5 

Some blank disks 

DB Master version 4,2 and/or Business Writer 

from Stoneware 

OK. it's about time someone ptit to paper the 
deproleciion method used lor the Stoneware 
series of software! If you have used (the 
infamous) DB Master, you will know exactly 
what 1 mean... 

Stoneware offers several great pr<xlutis, but 
they are not known for customer service. 
Stories of four-week delays for backups, and 
unanswered phone calls to customer service arc 
all true, and probably very familiar to those who 
have had any problems. Well, this is where I 
come in... Here is your customer service! 

Now Stoneware has developed a new product 
called "Business Writer". This is a word 
processor allowing you to take files from 
several different word processors (and formats) 
and combine them into one document. It is very 
easy to use and convenient. 



ThL' protections used on DB .Master version 
4.2 and Business Writer are e.xactly the same. 
This should be no great shock since the 
protection used is good, and lor quite some time 
remained untouched by prying eyes. The main 
protection used is half tracking, and Stoneware 
was one of the first (if not THE first) publisher 
to use half tracking. 

The only other protection used by Stoneware 
is modified data and addreiw epilogue bytes lyou 
know, the three byte sequence found on every 
sector of a disk that tells DOS where the data 
to read ends). 

So our job is to convert the half tracks to 
normal DOS w^hole tracks and to change 
Stoneware s DOS to readjust whole tracks and 
not halftrack.^. It turns out this isn't a difficult 
job as far as manual labor is concerned. But to 
figure it out, you need a real good 
understanding of RWTS tlhc Read and Write 
a Track and Sector portion of DOS), 

First a little background on half tracks... Yes. 
regardless of how stupid it simnd.s, it is pt.)ssible 
to write in between the normal DOS track, thus 
the name "hair tracks" evolved. This is not to 
say that wc can use track 1. \.S and track 2, 
Due to hardware limitations, tracks must be 1 
lijll step away from each other. In other words, 
you could use full tracks to 5. and then half 
tracks 6.5 to 34.5, and this is precisely what 
Stoneware has done. Notice that track 6 and 
track 5.5 are not used. Again, this is because 
tracks must be at least 1 full step away frt>m 
each other, or you could get "track bleeding" 
where data from one track bleeds to another, 
(Actually, there is a way around track bleeding 
called "spiral tracking", but that is out of the 
scope of this article). 

Now as any good student would ask, "Holy 
bat-tracks, how did you know that Stoneware 
uses tracks to 5 and 6.5 to 34.5?" Well, you 



can not tell by listening, so the only way left 
is by watching, This involves stripping your 
drive of its skin and watching the stepper motor 
(as described in Hardcore COMPUTJST No. 
5. pg. 1 1), or by using a "track monitor" such 
a.s Track Star by Midwest Microsystems. 

Whatever your weapon. Stoneware knows 
that only some extremely small percentage of 
Apple users would ever be able to figure this 
out, much less find a way to convert and defeat 
this protection. Well, wc can't let them gel away 
with it! 

Now that we have a diagnosis on the 
mutation, we have to understand how it works. 
On a hardware level, the way your ,^pplc tells 
the drive to move the read/ write head is by 
pulses. Timing is critical, and there are a couple 
of ways to create pulses to move the head. Each 
pulse moves the head a quarter track, but the 
way DOS is written you can only move the head 
in halftrack increments from standard RWTS. 
Stoneware uses a fairly standard RWTS portion 
of DOS. so they can only deal in half and whole 
tracks. 

The routine in DOS that carries out the job 
of moving the head is at SB9Afi. It issues two 
pulses to move the head a full track. But if we 
tell it to do one more pulse it pushes the head 
to a half track beyond the desired track. This 
is easy to do from nomial DOS. At %WiM> you 
can put a JSR iJump Subroutine) to the 
following routine: 



B430- 


86 2B 


STX 


$28 


B432- 


35 Ik 


STA 


12A 


B434- 


C9 XX 


CMP 


»sxx 


B436- 


90 02 


ecc 


SB43A 


8438' 


E6 2A 


iNC 


m 


mk- 


AD 78 04 


LDA 


10478 


B43D- 


C9 XX 


CMP 


nxx 



to 
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& Business Writer 



643F- 


90 03 


BCC 


SB444 


B441- 


EE 7a 04 


INC 


S0478 


S444- 


A5 2A 


LDA 


S2A 


8446- 


60 


RTS 





This is the rouiine that Stoneware uses lo read 
half tracks (note that the XX represents twice 
the value of the track you want to read). When 
Stoneware wants to read whole tracks they put 
a $68 (RTS, Return From Subroutine) at 
SB434. When they want to read halftracks they 
put a $C9 back at SB434. 

It was easy to Tind the routine that did the 
swjtchinj! between whole and half tracks by 
searching for the byte sequence " A9 C9 8D 34 
B4", which represents "load the ai;cumulator 
with the value $C9 and store it at $B934". To 
fix it so it just reads whole tracks, merely 
involves changing the "load accumulator with 
the value $C9" to "load the accumulator with 
the value $60". This way the halftrack rouiine 
is never accessed. 

Now we must copy tracks to 5 to another 
disk and convert the halftracks 6.5 to 34.5 to 
whole tracks by reading in half tracks and 
writing out whole tracks. 

Super JOB can handle it with ease. 
Examination of the di.sk reveals that both 
epilogues have been changed to DF AB. The 
controller reads the Stoneware disk from tracks 
to 5 (u.sing the Fast routine in Super lOB v 1 ,5) 
and writes them onto the copy normally. Simple 
so far. Each following track is read by setting 
the variable CD to W (seek only ) and going to 
the R.'W Sector routine to move the head to 
track X.0. then using the Move S Phases 
subroutine to move forward one half track to 
track K.5. This is done for each track. 

A sector edit is performed on the following 
locations: 



Track 


Sector 


Byte 


From 


To 


$00 


$03 


$91 


IDF 


$DE 


m 


03 


9B 


AB 


AA 


m 


03 


35 


DF 


K 


m 


03 


3F 


AB 


AA 


m 


0C 


E3 


C9 


m 


add this 


for Bus 


ness ir 


ter: 




05 


0A 


13 


C9 


60 



Instructions 

1) Install the controller with this article in Super 
lOB V 1 .5. It lakes advantage of the Fast routine 
in version 1.5, 

2) If you are copying Business Writer, add these 
lines: 

Seie DATA 6 CHANGES 
507B DATA 5,18,19,96 

3) RUN Super lOB and copy the disk. 

4) Don't forget to copy both sides of DB 
Ma.>!ter. 

Congratulations, you now are finished I 



controller 

1000 REM STONEWARE CONTROLLER 

1010TK = fl :LT = 6 .ST = 15 LS = 15 CD^WR :FAST 

- 1 
1020 GOSUB 490 : (5OSUB170 : (MSUB 610 TH = 5 : 

GOSUB3i0 :TK = 
1030 GOSUB 490 , GOSUB 230 , GOSUB 610 : IT = 35 

:TK = 6 :ST = 
1040 Tl = TK GOSUB 490 RESTORE ; GOSUB 170 
1050 CD = : GiKUB 100 . POKE BUF PEEK (BUF ) 

-1 :CD = RD,PH = TK* 2 .S= I : GOSUB 130 



= AND TK<LT THEN 



END 



1060 GOSUB 430 : GOSUB 100 :ST = ST+l : IFST< 

DOS THEN 1060 
1070 IFBFTHEN 1090 

1080 ST = .TK = TK^- 1 : IF TK < LT THEN 1050 
1090 GOSUB 230 : GOSUB 490 :TK = Tl :ST = 9 
1 100 GOSUB 430 GOSUB 100 : ST = ST + 1 : I F ST < 

DOS THEN 1100 
1110 ST = :TK = TK^-1 . IFBF = 

1100 
1120 IFTK<LTTHEN 1040 
1130 HOWE PRINT"C0PYO0N£i 
5000 DATA 223 ,171 ,223 ,171 
5010 DATA 5° CHANGES 
5020 DATA J .145 ,222 
5030 DATA ,3 ,155 ,170 
5040 DATA ,3 ,53 ,222 
5050 DATA ,3 ,63 170 
5060 DATA ,12 ,227 ,96 
5070 REM DAT A5 ,10 ,19 ,96 



controller checksums 



1000 


- $356B 


1110 


- S2028 


1010 


- SF776 


1120 


- S8Ae5 


1020 


- $7B80 


1130 


- S74C1 


1030 


- J0AA8 


5000 


- $0659 


1040 


- SF4E7 


5010 


- $69C9 


1050 


- S840B 


5020 


- S1734 


1060 


- S8B0F 


5030 


- SABED 


1070 


- S19F5 


5040 


- S5CFE 


1M0 


- I5D14 


5050 


- $0398 


1090 


- S2981 


5060 


- $71B6 


1100 


- S1881 


5070 


- $43E8 



Hardcore COMPUTIST No. 25 



11 



softkey for... 



Another DB Master 4 + 



By Anthony L. Barnett 



StutU'uare, Inc. 
50 Belvedere St. 
San Riifctel. CA 94901 



Etequirements: 

Apple //e. //c. or 64K |[ Plus 

Super lOB vl.2 

A sector editor 

Previous DB Master softkey s From Hardcore 

COMPUTIST Nos. 7 and 21. 

When DB Master Version 4 + disappeared 
from the Most Wanted list in Hardcore 
COMPUTIST No. 20, 1 thought a .softkey might 
be on the way. When I saw Clay Harrell's 
.wftkey in Hardcore COMPUTIST No. 21, 1 
thought at !ast 1 would be able to back up this 
program with four copies which I usually make 
of all my valuable software. (Stoneware has 
done some amazing feats to fool all the hit 
copiers hut not the Super lOB technique on this 
software.) 

Unfortunately, although Super lOB copied 
the disk without an error message the resultant 
copy would not boot. In fact, it crashed into 
the monitor at SB 100. As nothing had been put 
into memory at $8100, it appeared as though 
the third stage of the boot was failing to load. 

1 then looked at $BF75 and saw that a volume 
mismatch error ($20) had iweurred. Fortunately 
DB Master uses a fairly standard RWTS 
routine. The volume number found in location 
SB7F6 was $FF. However, checking the ctxie 
which caused the jump to SB 100, 1 saw that $FF 
was loaded into $BF76 by the program. 

I decided the simplest way to check the actiial 
volume number was to use a nibble viewer (like 
The Nibble r) on the original disk. Sure enough, 
a volume number of 1 showed up. So, this time 
I used Super lOB with a disk fonnatted with 
volume number of 1. 



At last the familiar DB Ma.ster logo appeared. 
This lime, however, the program would not 
read the Utility disk, h was then I remembered 
Dan Lui's earlier softkey for version 3 
{Hardcore COMPUTIST No. 7). With a sector 
editor, I modified track 0. sector E, bytes 
$A.$B to D0 12, 

With this la.st modification I could not boot 
program disk #1 and read data and utility disLs. 
However. The program would not recognize 
Program disk ^2. Even after miKJifying track 
0, sector E on disk 2 it was still noi readable. 
Finally I decided to check the volume number 
again. Eureka! The volume number of disk 2 
is 2. So by using Supwr lOB and formatting disk 

2 to volume 2 plus the sector edit of track 
sector E. J had a working, unprotected copy of 
DB Master 4+... well, almost. 

There is a bug in the label printer program 
which docs not allow you to justify a label with 
spaces in the comment fields. This works fine, 
however, on the label printer on Utility Pak ff2. 
In addition, one may wi.sh to use Stats Pak or 
the transaction file merge facility of Utility Pak 
If 2. 

To get to the Utility or Stats Pak one uses 
option 9 from the Utility Pak menu. The 
unprotected version of DB master could not 
read the Stats Pak or Utility Pak disks. To 
overcome this I used Dan Lui's version 3 
softkey on these disks, editing track 0, sectors 

3 and E only. However, the program would still 
not read the unprotected Utility or Stats Pak, 

I then began to search Program disk No. 2 
for some code which turned on the half-tracking 
of the Utility Paks. In fact, on track 8 sector 
9. 1 found the BASIC program which gives the 
menus for file maintenance. To get into the 
program it is necessary to use a sector editor 
to modify a statement with a CALL- 151 (the 
sequence 8C C9 3 1 35 31 3A) so the program 
crashes into the Monitor. Then do a D6:& S) to 
turn off the run time flag, and iOO to 
Applesoft. 

After listing the program, I found a line that 
said 

LI = PEEK (106) * 16 "2 + P£EK(105) - 48: 

CALL LI 
1 suspected this call to be the one which 



turned on the half tracking so I set my "break 
ptiini" (CALL- 15!) to the line before it and ran 
the program again. I thus found the value of 
LI and the starting point of the routine I wished 
to avoid. 
I changed this line with a sector editor to read 



POKE PEEK (106) 
48, 96. REM 



* 16 • 2 + PEEK(!05) - 



At last, I had a completely deprotected version 
of DB Master 4+ and Utility Paks. 

As a final fling. I have always been peeved 
that DB Master would not find the date from 
my CCS 7424B clock in spite of what the 
manual says. Several letters to Stoneware have 
proved fruitless on this issue. However, by 
modifying the BASIC program which begins 
on track 4 sector A of Program disk No, 1 so 
that it recognizes the signature bytes of my 
clock I no longer have to enter the date. 

Step B) Step 

1) Use Clay Harrell's softkey (Hardcore 
COMPUTIST No. 21) with Super lOB vl.2 for 
DB Master program disks. When asked whether 
you wish to format the disks, respond Yes and 
use Volume No. 1 for disk 1 ,and Volume No. 
2 for disk 2. 

2} in addition to the sector edits listed by Clay 
Harrell. edit Track 8, Sector E. bytes SA and 
$B to DO 12 on both program disks. 

3) On disk 2 edit track 8. sector 9. bytes 
$86-$A0 (27 bytes) to 

B9 £2 28 31 30 36 29 CA 
31 36 CC 32 C8 E2 28 31 
30 35 29 C9 34 38 2C 39 
36 3A 62 

4) Use Dan Lui's softkey (Hardcore 
COMPUTIST No. 7) to make unprotected 
copies of Utility Pak.s or Stats Pak editing Track 
only . To be safe, mtxiify line 250 of COPYA 
to ensure the copy is formatted with a volume 
number of I. 

5) Put a write-protect tab on all disks. 



■i 
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softkey for... 



Barron's 
Computer SAT 



by Glenn Schmottlach 



Barron's Compiiitr SAT Study Prognm> 
Barron 's Etiucaiitmal Series. Inc. 
113 Crossways Park Drive 
Woo(lbur^. New York 11797 
$89.95 



Requirements: 

48K Apple |[ or equivalent 

Super lOB vl.2 

Si!( blank disk.'i 

One or two disk drives 

TKis computer preparation package by 
Barron has to be considered one of the best 
programs available For preparation before 
taking the SAT. Along with three double sided 
disks comes three hefty study manuals which 
you use along with the program. Essentially you 
read the SAT questions out of the studj manuals 
and choose the correct answer on the computer. 
If you choose the wrong answer the computer 
responds by giving you hints for the correct 
answer, and if you are still incorrect the right 
answer and an explanation of why it is the 
correct choice appears on the screen. The 
program uses actual hi- res pictures on the 
mathematic section to convey an easier 
undersiaitding of the problems given. Of course 
the program also keeps track of your score and 
gives you some guidelines on what you should 
study more. 

The Protection 

When the Barron study program disks boot 
they sound like norma! DOS 3.3 disks and the 
familiar bracket appears. After browsing 
through the raw track nibbles using Copy [1 + 
4.4D (another good program for this task is the 



Nibbler published in Hardcore COMPUTIST 
NO. 19. page 25), 1 noticed two things different 
from normal DOS 3.3 disks. The first thing I 
noticed was that the stan of address marks were 
changed on all of the disks from the normal 
values of D5 AA 96 to BB AA 96. For those 
out there who are unaware of what these marks 
are let mc tell you. When you initialize a disk 
DOS places these certain values on a disk so 
it can Und the beginning of valuable information 
such as where a sector begins and where valid 
data can be found. If standard DOS 3.3 tries 
to read or write to one of these protected disks 
it won't be able to find valid data because of 
the changed marks and therefore an error will 
be produced. This is a very common technique 
and it is used on almost all protected disks and 
often in conjunction with other protection 
methods. The second major difference I noted 
was the fact that on all six disk sides track $0A 
was unformatted. The only explanation I can 
come up with this is that the protected DOS 
might use some .sort of nibble count on track 
$0A. We won't have to worry about that 
becau.se the deprotected versions of these disks 
work smoothly with standard DOS 3.3. The 
only thing that I had to change because of the 
unformatted track was programming the 
controller to skip track $0A so Super lOB 
wouldn't get hung up on it. 

How to Deprotect the Disk 

The following steps are used to deprotect the 
Barron program disks: 

1) Boot a standard DOS 3.3 disk and then clear 
memory 

FP 

2) Initialize each of the six blank disks using 
HELLO as your boot program, 

INIT HELLO 

repeat for each disk. 

3) Load up Super lOB Ver. 1 .5 and type in the 
controller program. 



4) Follow the prompts and when the program 
asks you if you want to initialize the duplicate 
disk tell it no because we just formatted al! six 
blank disks, 

5) Copy all six program sides of the Barron 
SAT disks using the same contoller just like in 
step 4. 

Closing Cotiunents 

You have completely deprotected all of the 
Barron SAT program disks. You should now 
feel at case knowing that you aren't using the 
original disks. Sit down now and study, study, 
study. Maybe you'll be able lo raise those scores 
just a few more points; and then again maybe 
not. 



controller 

1000 REM BARRONS COMPUTER SAT CONTROLLER 
1010TK = 3 :ST = IT = 35 CD-W 
1020 Tl = TK POKE 47W5 . 187 GOSUB 490 
1030 GOSUB 430 : GOSUB 100 .ST = ST+1 : IFST< 

DOS THEN 1030 
1040 IFBFTHEfJ 1070 

1050 ST = :TK = TK+ 1 : IF TK = 10 THEN TK = U 
1060 IFTK< IT THEN 1030 
1070 GOSUB 490 .TK = Tl :ST = : GOSUB 230 
1080 GOSUB 430 GOSUe 100 : ST = ST + 1 ; I F ST < 

DOS THEN 1080 
1090 ST = TK-TK + 1 . IFTK=10THENTK = 11 
1 100 t F BF = AND TK < LT THEN 1080 
1110 IF TK<LT THEN 1020 
1120 HOME . PRINT : PRINT "DONE" WITH" COPY" . 

END 



controller checksums 


1000 - S356B 


070 - SD588 


1010 - $4CFF 


080 - SCF82 


1020 - SA7C5 


090 - S24F9 


1030 - SB1C4 


100 - S97D8 


1040 - $15AA 


110 - SED2F 


1050 - $9CE7 


120 - SC700 


1060 - $482C 


% 
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By Clav Harrell 



Baiidville 

imi Medical Park Dr. S.E. 

Grand Rapidx, Ml 49506 

U9.95 



Requirements 

64K Apple II Plus, //e or //c 
One disk drive witli DOS 3.3 
A sector editor 
Take 1 from Baudvilie Software 



Take I is an excellent graphics program! Just 
looking ai the dcmo makes you want Christmas 
to come early, so you can get one. The graphics 
are extremely smooth, flowing and detailed. 
Thi.s program is a "10" on my list. 

The protection isn't io<.) .shabby either, and 
Baudvilie does a trick or two to keep us Irom 
making easy copie.s. The protection can'l be too 
wild though, or the u.sers would have problems 
interfacing their graphics routines with normal 
DOS 3.3. 



The disk seems pretty much normal, and can 
be copied with COPY. A without toti much 
difficulty. Use COPYA to copy Take 1 to 
another disk. This will be our work disk and 
wc can examine the protcctiors from here. 

Go ahead and btwt the COPYA version of 
Take 1. Notice it reads die disk and prints 
"Take 1" and your serial numberon the screen. 
Then it just hangs there, looking for something 
on the disk! 

Since (after many tries of reading die disk 
and not finding what it wanted) it doesn't clear 
meniory and reboot, we can interrupt the 
program at our leisure and examine the code. 
The best way to do this is to use a Replay II 
card or a Know -Drive. These to<:)ls wili allow 
you to interrupt the program and let you know 
the current location a program is running at. 

Running in the RAM Card 

But we encounter our first pnrtilem with Take 
I : they are using the memory within the RAM 
card for the RWTS. To access this memory we 
have to use some tack, and refer to our 16K 
R.\M card manual. 

Looking at our RAM card manual tells us that 
if we want to turn on the RAM card, we type 
C080 from the monitor. If you try this, your 
Apple will lock up and the only way to recover 
is to power down and cold boot. The reason 
for this is simple. 



The RAM card occupies the same memory 
as your Applesoft ROMs and the monitor ROM 
(tD000-$FFFF). It is accessed by soft switches, 
much like the way you turn on and off the hi- 
res pages. But when you turn on the R.4M card, 
you are also turning off the motherboard 
monitor ROM, which overkxiks all your 
Apple's functions- Since there isn't a monitor 
ROM in the RAM card, your Apple locks up. 
To prevent this, we can set the RAM card to 
"write enabled," and read from the 
motherboard ROMs Now we can copy an 
image of the monitor ROM into the RAM card 
u.sing the monitor's memory-move command. 
Finally, we can turn on the RAM card and 
examine the memory in ii! 

To do this type: 

c»8i cesi 

F»«e<F«Bfl.FFFFV! 

From our Replay card we know that the 
program was stuck reading the disk around 
SDC4F. Here is the code: 



K8B- IDA $C0aC 

DCBE- BPL $0C8B 

DC90- CMP mi 

DC92- BNE 5DC42 
DC94- NOP 

DC95- LDA $C08C, 

DC9a- BPL 5DC95 

DC9A- CMP HIM 

DC9C- BNE SDC42 
K9E- CLC 
rcSF- RTS 



:Fjrst byte of Address or 
:Data epi logue 



:La3t byte of Address or 
:Data epi logue 

:E[id of routine 



K;43- RTS 


.End of previous routine 


DC44- LDY fJFC 


:start 


DC45- STY S26 




DC4S- INY 




DC49- BNE SDC4F 




0C4B- INC (26 




DC4D- BEQ $DC42 


. 


DC4F- LDA SC0BC.X 




DC52- BPL $DC4F 




DC54- CMP n05 


:First byte of Address 


DCSfi- BNE $DC48 


:proIogue tnarker 


DC58- NOP 




DC59- LDA SC08C,X 




DC5C- BPL SDC59 




DC5E- CMP HM 


;Second byte of Address 


K60- BNE SDC54 


.prologue marker 


0062- LDY mZ 




DC64- LDA OSC.X 




DC67- BPL I0C64 




DC69- CMP #196 


Last byte of Address 


DC6B- BNE SDC54 


prologue marker 
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As you can see. this routine cheeks the disk 
for the prologue adtiress marker of $D5 AA %. 
Note that a prologue address marker is on every 
sector of a normal DOS disk. It's a road sign 
to tell DOS the next few bytes designate what 
track, sector, and volume it is reading (hence 
"soft sectoring"). 

Likewise, the routine also checks for an 
epilogue byte of SDE AA. Epilogue bytes are 
on every sector of a norma) DOS disk too. They 
tell DOS that "the data ends here'. 

There is really nothing fiinny about this 
routine. The address and epilogue bytes this 
routine is looking for is on every normal DOS 
disk. So we must dig deeper, since the program 
is hanging here for some reason. First, we 
should find where this routine is called from 
(we know the routine starts ai $DC44 since 
there is an RTS at $DC43). 

To make this easier. I copied the RAM card 
memory down to motherboard RAM with the 
monitor move command 

Then I used the Inspector's search command 
to look for ai.SR SDC44. Sure enough, I found 
one at S5MF (really SEMF), Here is the code 
I found: 



AAA INDUSTRIES 

CHEhicni produIts division 



<» 

ID 

in 

XT 

m 




9: :H: 

■ ■; I 

B'.m'. mm', m 

HWB 'HI' 'HI' 

B B 'B' 

.B. B B' 



80 81 82 83 84 
1st Quarter Sales 



85 



E00F- JSR SDC44 
E012- LDA S2D 
Eai4- CMP «$FF 
E016- BNE iE00F 



:go to ctieck [JlSK 
.load A with location $2D. 
compare it to SFF 
:lf rot equal, go to $E00F 



Here is the offending routine! Notice it jumps 
to a subroutine at SDC44 to check the disk. 
After it returns, it checks kKation S2D. and if 
it is not $FF, it goes back and starts over. Hence 
our disk keeps running in this infinite loop and 
never finishes loading the program. Obviously, 
somewhere in the code at $DC44 it reads the 
disk, and if something is not up to benchmarks. 




______ 



tj^^^^^m^^^^^^^ 




it loads location $2D with something other than 
$FF 

So to defeat this routine we must find it on 
the disk, and change the code with a sector 
editor from $D0 F7 (BNE $E007) to SEA EA. 
which stands tor "no operation" (NOP). This 
removes the "branch back to stan if location 
$2D is not equal to $FF". The code lives on 
track 0. sector 6. byte $16, and also on track 
0. sector $F. byte $08. I used the Inspector's 
Locate command to find the code on the disk. 

Lo and behold. Take 1 is now deprotected . 
Note that this niotine lived in two places on the 
disk. If you only found the first one on sector 
6 of track 0. the program would die about a 
third of the way through the boot. 

Cookbook Version 

1) Boot your system master disk and run 
COPYA. 

PR#6 

RUN COPYA 

2) Run your favorite sector editor and make the 
following changes to the COPYA version of 
Take 1: 

Track 0, Sector 6, Byte S16 
Charge from SOa F7 
to SEA EA 

Track 0. Sector $F. Byte i08 
Charge from SD0 F7 
to SEA EA 

3) Write the sectors back out. 
And you're all done! 



i 
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DOS to ProDOS and Back 



Another 
Single-drive 

Solution 



Bv Brian K. Chin 



Requiremt'ni.s: 

64K Apple II Plus and up 

One disk drive 

A DOS 3,3 disk 

A bbnk disk 

A ProDOS disk formatter program 

A sector editor or block editor (optional) 

This prtK-'edure lor single disk DOS-to- 
PmDOS conversion is presented not only as an 
alternative lo the procedure presented by Mr. 
Eubanks (Hardcore COMPUTIST No. 9. 
p, 15). but also as a simpler and more flexible 
solution which will anempt to shed a little light 
on ihc subject of how disk formats work. The 
prcKcss involves the creation of a disk on which 
both the ProDOS and DOS 3,3 environment.s 
can peacefully co-exist. The inspiration for this 
article was to find an easier way to convert files 
with only one drive. Being an avid AppleWorks 
user. I have found that even occasionally 
working with only one drive can be a real 
hassle, not to mention being unable to convert 
text files back and forth without the second 
drive. The reason behind the creation of the 
Dual DOS Disk was to see if it could even be 
done The notion that my new disk could be 
used to solve the single disk conversion problem 



did noi cume lo my attention until after ii had 
spent a month on my shelf doing nothing. 

As with all changes come both advantages 
and disadvantages. The same holds true here 
as well. You are no longer confined to 
converting only Applesoft and binary files. You 
are no longer confined to a maximum tile size 
of 59 sectors (30 blocks) in one direction, and 
193 sectors (86 blocks) in ihe other. You now 
possess the ability to transfer a file of ANY 
type, and up to a maximum size of 258 sectors 
(129 blocks). The only drawback which exists 
is that you only have the available space of half 
of a ProDOS disk and half of a DOS 3.3 disk, 
which reduces your operating and storage space 
by a factor of two. While this may eliminate 
any need for disk swapping during the 
conversion process, it may require copying files 
onto and off of the special disk both before and 
after Ihc conversion is made. In light of the 
benefits gained, this becomes a minor problem 
at worst. Lastly, and most important, it permits 
you to use the CONVERT program, without 
forcing you to make all of those nasty little 
RESET brcak.s, memory moves or forcing you 
to learn how to think in hexadecimal. 

But Aren't the Formats Different? 

."tt one time or another, it was the general^ 
concensus (I think) that only a disk formatted 
under DOS 3..1 could contain DOS 3,3 files. 
The same held true with Apple CP/M, Pascal 
and ProDOS, This is true to a certain degree. 
The major dissimilarities between the four 



operating systems (we'll only be dealing with 
two of ihem) are the location of the directory 
data and volume bit-map, the placement and 
numbering of logical sectors, and how the 
operating system defines the minimum amount 
of data that can be read at any one time. 

Let's start with the simplest of them, the last 
one. As you already know, DOS 3.3 reads and 
writes data in 256 byte sectors, while ProDOS 
uses 5 12 byte blocks. However, as we shall see 
in a minute. ProDOS does not really allocate 
eight blocks per track when it formats, its the 
way DOS 3.3 wonld allocate 16 sectors, but 
defines a block as a specified sector, plus the 
physical sector located two sectors over. Thus, 
ProDOS does not read a full block, it makes 
a sequential read of two noncontiguous sectors. 
If this is confiising, please bear with me. It 
should become a little clearer very soon. 

In order for a disk (with the exception of 
DOS 3,2) to be Apple- readable, its formal must 
be consistent with Apple's six teen-sector 
fonnat. This is why sector editor utilities, such 
as DiskEdii. are able to read any of the four 
operating system formats. However, the sectors 
read from a non-DOS 3,3 disk will appear to 
be in an unorganized order because each system 
utilizes a different 
logical sector layout when accessing the disk. 

When a disk is formatted, under any of the 
four operating systems, it divides each track into 
16 equally sized subdivisions. Each of the.se 
subdivisions are known as physical sectors 
because they arc numbered (pliysicaliy) by their 
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orientation on the disk. Sector is next to sector 
t , whicti is next to sector 2. and so on. Sector 
is determined rather arbitrarily and is used 
to denote the start of that particular track. 
Within the boundaries of each physical sector 
are two fields, the first containing the address 
infortnation. and the second the actual data. 

Within the address field of each physical 
sector is a pair of bytes indicating the physical 
sector number, With the exception of sector 0. 
the logical sectors are numbered by Ihcir 
respective operating systems, independently of 
their location on the disk (their physical sector 
numbering). 

All the operating systems have their own way 
of keeping track of the sectors internally. These 
are referred to as logical sectors. When the time 
comes to access the disk, the logical sector 
number is cross-referenced in a table to find the 
matching physical sector number. The way in 
which a physical sector is logically numbered 
is called sector skewing. The following table 
shows how the different operating systems 
logically number each of the 16 sectors. 



Physical 


12 3 4 


5 6 7 8 9 ABCD E F 


CP/M 


B 6 1 C 


7 2 D B 3 E 9 4 F A 5 


Pascal 


8 19 2 


A 3 B 4 C 5 D 6 E 7 F 


DOS 3 3 


7 E 6 D 5 C 4 B 3 A 2 9 1 8 F 


ProDOS 


8 19 2 


A 3 B 4 C 5 D 6 £ 7 F 


P. DOS bik 4 4 1 


5 15 2 6 2 6 3 7 3 7 




T tThis 


sector is the second 




t half 


3f ProDOS block 




iTtits sector is ttie first half 




of ProOOS blocH 0. 



Thus, when DOS 3.3 looks for a sector $0F (its 
logical number), it first reads the i6th byte 
(don "I forget sector 0) in its sector translate 
table, which yields the corresponding physical 
sector number (in this case 2). DOS then Imiks 
for physical sector 2. and reads the following 
data field. When the sector is in memory. DOS 
will think that it got sector S0F and continue 
on its way. You will note that disk access under 
ProDOS (and Pascal ) is dramatically faster than 
DOS 3.3. This is due less to changes in the 
operating system and more to the changes in 
sector skewing. ■ ' 

A Word About Directories 

The main reason why any one operating 
system cannot read another operating systctn's 
files is the location and format of the volume 
bit-map and directory sectors. The directory 
sectors (blocks) act as the the disk's table of 
contents, holding the file names and their 
locations on the disk. The "volume bit-map is 
responsible for keeping the status of each sector 
(block) on the disk; whether the sector (block) 
is available for storing data, or is currently in 
use. On a ProDOS disk the directory lies in 
blocks 2 through 5. and the bit-map in block 
6. Under DOS, the directory lies on track 17. 
sectors 1 through 15 (S0F), and the bit-map, 
or volume table of contents (VTOC) on sector 
0. 

The directories of both DOS and ProDOS 
function in much the same way. They both 
contain filenames and vital file accounting 



information such as links to the other directory 
sectors (blocks), file-size, file-type, and file 
location, or more appropriately, Ihc Uxaiion lo 
the DOS track/sector list and the ProDOS index 
block. These two packets of data contain the 
locations of all track/sector pairs (blocks) of 
data relevant to that particular file. ProDOS 
directory blocks alst) contain other data. Among 
them are, volume name, file creation times and 
dates, last modification lime and date, starting 
file address, file length, and le.Kt record length. 

The differences between bit- map formats arc 
more evident. The DOS bit- map begins at byte 
56 on track 17. sector 0. the VTOC, The first 
quarter of the sector is reserved for 
miscellaneous accounting information such as 
disk volume number, DOS version number, 
location of first directory sector, and track 
allocation direction. Each track is represented 
by a sequence of 4 bytes. Of the first two bytes, 
each bit. either 1 or 0, represents a sector which 
is either free or allocated, respectively. The 
second two bytes are not needed and left a I $00. 
Thus, an empty track is represented by 'FF FF 
00 0(5". Under ProDOS. since a volume may 
be of any size, allocates one byte to represent 
8 blocks, or in this case, a single track. Here 
too, it bit-maps with 1 and so that $FF 
indicates free range of S blocks. 

Bearing this in mind, the only reason thai 
DOS cannot read ProDOS files, and vice-versa, 
is that b«nh DOS and ProDOS expect the 
directory to be in a certain position on the disk. 
Thus, when the directory sector (bltxk) is read. 
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iliL' opcruiing system must Lditcmpl lo jmcrprei 
an empty sector (block), unusL-d and tilled with 
"Ofl". or a sector (block) full of valid ilaia. hut 
useless as director)' data. This has the elTeci of 
confusing the CATALOG routine tiecause the 
dircctnr\ infornialion is not where it is expected 
to be. and is also written in a different format. 

What Had To Be Done 

Armed with Ihis mforniation, 1 forged ahead 
to create a disk of two '"DOSs", Actually the 
solution was simple, just create a disk with two 
catalogs on it. However, the proa'ss was a little 
bit tougher. I formatted a disk under ProDOS. 
then bil-eopicJ tracks 17 through M from a 
freshly formatted DOS 3.3 disk. At that point 
I thought 1 was done, umi! 1 remembered that 
both operatmg .systems would regard the di.sk 
a.s free for storage and that there was no 
provision lor keeping one system from over- 
writing data saved b\ the other. It was at this 
time when 1 reali?,ed. a bit late, that the DOS 
catalog track is conveniently located in the 
middle of the disk, and the ProDOS directory 
on track 0, Therefore, i could allocate irack.s 

to Ifi as ProDOS tracks and tell the DOS 
VTOC that they had been written to. and tell 
ProDOS that tracks 17 to 34 were also full. This 
however, would require a nnxlification of both 
bit- maps. 

By manipulating the information it: a disk's 
bit-map. one can define sections of the disk' as 
being are off-limits to die operating system. The 
operating sy.stem interprets those areas as 
"written to" and therefore cannot de-allocate 
them, whether there is valid data there or not 
(in this ease, it's the latter). The only way that 
DOS or ProDOS can Tree up" a used sector is 
by deleting the file which last resided there. 
Since there will he no DOS Hies in the ProDOS 
allocated section and vice versa. DOS will not 
he able to do anything to the ProDOS alliKated 
tracks, as well as the reverse. Be warned 
however, that improperly nnxlifying a bit map 
after data is stored on the disk could result in 
allocation of already used sectors as usable, 
which coidd lead to the accidental over- writing 
of valuable data or even critical DOS 
information. 

At the time I made the proper modifications. 

1 used a sector editor for the DOS bit-map and 
a bliKk editor for the ProDOS bit-map. By 
accident however. 1 discovered that the required 
procedure need not be as long and complicated, 
and I hat I could complete the entire operation 
in the DOS ^.^ environment. As 1 was scanning 
through track V). my finger brushed the key 
which insiructs the program to read the previous 
block of data. Since I was on block 8. it read 
bkx'k 279 (track ,W, sectors I and 15). 1 was 
rather surprised to see that it did not return with 
an 'I/O ERROR' message. At that point, I tried 
reading and writing to a regular DOS 3.3 disk 
with the blix-k editor and to a ProDOS disk with 
a sector editor, with mostly successful results. 
The only problem was that the logical sector 
numbering (skewing} was fouled up. 

Sensing that the discovery was only 
beginning. I tried another experiment. I 
tbmiaited two disks under ProDOS and two 



under DOS 3.3 (here referred to DOS A & B 
and ProDOS A & B). I left the A disks alone, 
but sector copied DOS track 17 onto ProDOS 
B and ProDOS track onto DOS B, thereby 
creating a IX>S disk with ProDOS sector 
skewing and vice -versa. I then saved a rather 
large (S7000 bytes) binary file on each disk, 
under the appropriate op>erating system and ran 
speed tests on loading them, I found that the 
DOS skewing dramatically increased the time 
it took lor ProDOS to load the file, but that the 
ProDOS skewing had no effect on DOS 3.3 at 
ail. Upon determining this, I surmised that [ 



could use a ProDOS disk and modify it on a 
sector by sector basis, Finally, I dug into all 
four disks with a sector editor and derived a 
block -to- sector and secior-to-seetor translation 
tajjle. Using this. 1 took another ProDOS 
formatted disk, sector copied another DOS 
catalog track and modified the bit-maps, which 
yielded my goal . The results of conversion tests 
on a single drive Apple )[ -i- were miraculous. 
After my experiment with the dual DOS disk, 
1 developed an assembly language program, the 
DUAL DOS DISK MAKER, which modifies 
a standard. ProDOS fonnaited disk, and creates 



sic 




Source Code for D.D.D.M. 

...... -.'t 


* 






DUAL DOS DISK MAKER * 


* 






BV BRIAN CHINN * 


* 

* 






JUNE, 1985 ^ 


03E3- 


SETRWTS 


EQ t03E3 




03D9- 


CALLfWTS 


EQ I03D9 




2100- 


BUFFER 


EQ S2100 

OR 12000 




* — 
* 

* — 
2000: 


HA 
20 76 20 


TF OBJ DOOM 1 


KE THE Dl 

START 


SK DOS COMPATIBLE - ADO CATALOG TRACH AND VTOC * 

tV 


JSR CLEARBUF 


2003 


A2 80 


DOSHAP 


LDX *S80 .SET T/S BITMAP SUFFER OFFSET 


2005. 


A9 FF 




LDA ffSFF :SET T/S BITMAP MARRING VALUE 


2007 


90 00 21 


LI 


STA BUFFER, X .ALLOCATE A TRACK AS FREE 


200A: 


90 01 21 




STA BUFFER+l.X 


2000 


E8 




INX .SKIP THE NEXT FOUR BYTES 


200E 


E8 




liNX 


200F 


ES 




INX 


2010. 


E8 




INX 


2011 


'00 F4 




BNE LI 


2013: 


A2 00 


HAKEVTOC 


LDX SS00 :BUILD REMAlMING VTOC AREA 


2015 


BO A9 20 


L2 


LDA DATATBLl.X .FETCH DATA FROM FIRST TABLE 


2018 


F0 0A 




BEtJ WRTVTX TEST FOR 'EOD' 


201A. 


BC AA 20 




LOY DATATBLl+I.X ,FFCH DATA OFFSET 


2010 


99 00 21 




STA BUFFER Y .STORE DATA IN BUFFER 


2020: 


E8 




INX 


2021: 


E8 




INX 


2022: 


D0 Fl 




BNEL2 


2024 


A9 00 


WRTVTOC 


LDA urn 


2026: 


80 ED 67 




STA $B7ED .STORE SECTOR NUMBER TO WRITE 


2029: 


A9 11 




LDA «$11 , SET TRACK NUMBER TO WRITE 


202B 


20 82 20 




JSR GORWTS : WRITE VTOC 


202E: 


20 76 20 




JSR CLEARBUF 


2031: 


A9 01 




LDA #$01 : WRITE 1ST Oi RECTORY SECTOR (ALL 00 'S) 


2033. 


8D ED B7 




STA SB7ED ; STORE SECTOR NUMBER TO WRITE 


2036 , 


A9 11 




LDA //111 .SET TRACK NUMBER TO WRITE 


2038 


20 82 20 




JSR GORWTS 


203B 


A9 11 


BUILDOIR LDA Mil | 


2030. 


8D 01 21 




STA BUFFER+1 ; STORE TRACK OF NEXT DIRECTORY SECTOR 


2040, 


A2 OF 




LDX «0F 


2042. 


85 FF 




STX SFF .SAVE SECTOR* FROM RWTS DECTRUCTION 


2044 


8E EO B7 


L3 


STX SB7ED .STORE SECTOR NUMBER TO WRITE 


2047 


CA 




DEX .POINT TO PREVIOUS SECTOR 


2043 


8E 02 21 




STX BUFFER+2 .STORE SECTOR POINTER IN BUFFER 


204S 


86 FF 




STX SFF .SAVE SECTOR VALUE FOR NEXT WRITE 


2040 


A9 11 




LDA #Sll ,S£T TRACK NUMBER TO WRITE 


204F. 


20 82 20 




JSR GORWTS , WRITE SUBSEQUENT DIRECTORV SECTOR 


2052 


A6 FF 




LDX $FF .FETCH VALUE OF NEXT SECTOR TO DO 


2054. 


E0 01 




CPX SS01 CHECK TO SEE IF WE'RE DONE 


2056 


D0 EC 




BNE L3 



r 
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a DUAL DOS data disk. This was to alleviate 
the pr<>t>lem of having to copy the entire disk 
for my friends who wanted one, but mostly 
because 1 wanted to write this article. Have you 
ever tried to COPYA a disk out of a magazine 
article? 

Unfortunately. I have only scratched the 
surface of how DOS and ProDOS disks work. 
Although [he intent was not a DOS tutorial , 1 
hope 1 have exposed enough of DOS and 
ProDOS to form the foundation uptm which the 
■■DUAL DOS DISK MAKER" is based. For 
the most concise and in-depth coverage of both 



DOS and ProDOS. 1 highly recommend both 
Beneath Apple DOS and Beireaih Apple 
ProDOS by Don Worth and Pieter Lechncr. 

Doing It 

1) Type in the DUAL DOS DISK MAKER 
hexdump and save it on a DOS 3,3 disk, 

2) Forniat a blank disk, or as many as you need, 
under the ProDOS operating system. You can 
use the FILER program on the ProDOS Users 
Disk, the Apple works disk formatter, or any 



ijr ^__ 










if 






TELL PRODOS TO ALLKATE HALF THE DISK FOR DOS 


sj; 


2058: 


20 76 20 


PRODOS 


JSR CLEARBUF 






205B 


A9 FF 




LDA ffSFF 


ALLOCATE A TRACK AS FREE 




305D: 


A2 10 




LDX (fS10 






205F 


9D 00 21 


L4 


STA BUFFER, X 


STORE PRODOS BITIflAP DATA IN BUFFER 




2062: 


CA 




DEX 






2063 


10 FA 




BPL L4 






2065 


A9 01 




LDA mi 






2067 


SD 00 21 




STA BUFFER 


STORE STATUS OF TRACK ONE 




206A 


A9 03 




LDA SS03 






206C 


8D ED B7 




STA $B7E0 


STORE SECTOR NUMBER TO WRITE 




206F 


A9 00 




LDA #$00 


SET TRACK NUMBER TO NRlTE 




2071 


20 82 20 




JSR aORWTS 


tVRITE PRODOS BITMAP 




2074 


60 




RTS 


ALL DONE 




2075. 
* — 


60 




RTS 

MAIN 


JUST IN CASE STACK WAS PLAYED WITH 


* 
if 


SUBROUTINES 


2076: 


A9 00 


CLEARBUF LDA #S00 






2073: 


85 42 




STA 142 ■-■ 


- , - 




207A: 


A9 21 




LDA BS21 






207C: 


85 43 


■• 


STA $43 






207E: 


20 D6 B7 




JSR SB7D6 


CLEAR BUFFER AT S2100 




2081. 


60 




RTS 






2082 


8D EC B7 


GORWTS 


STA SS7EC 


STORE TRACK NUMBER TO WRITE 




2085 


A9 01 




LDA SS01 






2087 


SD E8 B7 




STA SB7E8 


STORE RVrrS TABLE TYPE 




20BA. 


A9 02 




LDA mz 






208C 


8D F4 B7 




STA SB7F4 


STORE 0.1 SK FUfCTlON 




208F 


A9 00 




LDA ffS00 






2091 


8D F0 fi7 




STA SB7F0 


STORE BUFFER LOCATION 




2094, 


A9 21 




LDA mi 






2095 


8D Fl B7 




STA SB7F1 


STORE BUFFER LXATION 




2099 


A9 00 




LDA nm 


PREPARE EXTRA DOS LOCATIONS 




209e 


8D EB 67 




STA SB7EB 


STORE VOLUME MATCHING NUMBER 1 




209E 


8D F3 B7 




STA SB7F3 


STORE BYTE COUNT 




20A1. 


20 E3 03 




JSR SETRVfTS 


PREPARE FOR RWTS CALL 




20A4: 


4C D9 03 




JMP CALLRIffS 


MAKE RWTS CALL 




20A7 


60 




RTS 






20A8: 
# ... 


60 




RTS 


JUST IN CASE STACK HAS PLAYED WITH 


^ 






DAT 


A TABLES 


i;* 


20A9 


01 31 01 










20AC 


37 03 03 










20AF 


0F 02 


DATATBL 


HS 013101370 


!a30F02 




20BI. 


10 35 11 










20B4 


01 11 30 










20B7 


23 34 




HS 103511011 


1302334 




20B9 


7A 27 FE 










20BC 


06 00 00 




,HS 7A27FE060 


900 


# 





Other suitable uiiliiy. You may name the disk 
anylhinj; you want, as long as it complies w ith 
the ProDOS rules. 

3) Boot up any DOS 3.3 disk and load the 
program, 

BLOAD DU.-VL DOS I>I,SK MAKER 

4) Place the ProDOS diskl.s), lormatted from 
step 2. into the drive and run the program. 
Repeat as often as necessary , 

CALL 8192 

5) You now have a DUAL DOS disk which can 
be copied with COPYA or any other suitable 
copy program. 

6) When you wish to use ihc DOS User's 
Conversion Kit (DUCK), simply set the DOS 
3.3 drive to the slot and drive your controller 
card is in. and set the preti,K via the pathname 
or slot and drive option. You're all set to 
convert. This disk will also work on a system 
w ith more than one drive, but 1 see no real need 
to use it there. 

One last note: since this disk only leaves half 
as much storage space as u.sual, 1 -A'ould 
recommend it only be used as a transfer disk, 
unless your particular application docs not 
require large amounts of disk space. If you're 
using an applications program or programming, 
save the data you need to con\en to both your 
master storage disk and to the DU,\L DOS disk. 
If this is not possible, copy the appropriate files 
onto the DUAL DOS disk before you convert. 

Dual DOS Maker Hexdump 



2000- 


20 75 20 A2 80 A9 FF 9D 


$FBF9 


2008: 


00 21 9D 0! 21 E8 E8 E8 


SF767 


2010 


E8 00 F4 A2 00 BD A9 20 


SF893 


2018 


F0 0A BC AA 20 99 00 21 


SAaB5 


2020 


EB E8 00 Fl A9 00 8D ED 


SE40F 


2028 


87 A9 U 20 82 20 20 76 


SA7CE 


2030 


20 A9 01 SD ED B7 A9 11 


S211A 


2033 


20 82 20 A9 11 BD 01 21 


S7ACF 


2040 


A2 0F 86 FF BE ED B7 CA 


SD331 


2048 


8E 02 21 86 FF A9 11 20 


SD480 


2050 


82 20 A6 FF E0 01 00 EC 


SBC89 


2058 


20 76 20 A9 FF A2 10 90 


S07C8 


2060 


00 21 CA 10 FA A9 01 80 


SF091 


2063: 


00 21 A9 03 SD ED B7 A9 


I3FA9 


2070 


00 20 82 20 60 60 A9 00 


5C8C2 


2078: 


85 42 A9 21 85 43 20 06 


S40DE 


2030 


B7 60 8D EC B7 A9 01 BD 


IE654 


2088: 


£8 B7 A9 02 80 F4 B7 A9 


$8D71 


2090 


00 8D F0 B7 A9 21 8D Fl 


$9358 


2098: 


B7 A9 00 8D EB B7 80 F3 


$4BE5 


20A0 


B7 20 E3 03 4C D9 03 60 


$F8A3 


20A8 


60 01 31 01 37 03 03 0F 


$FC82 


2080 


02 10 35 11 01 11 30 23 


$66E5 


20B8 


34 7A 27 FE 06 00 00 


SE09C 
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Adding "If Then 



By John R. Vokey 



Requirements: •• 

Apple 11 Pius, //e, I/q 

A need for higher programming 

The decision structure is one of the four basic 
structures of computer programs (Grogono, 
1980). Most high-level computer languages 
implement this structure as an "IF" command, 
as in the BASIC statement "IF X>1 THEN 
X = r' in which the statement following the 
"THEN" is executed only if the expression 
following the "IF" evaluates as TRUE. Many 
computer languages, including some versions 
of BASIC, extend the "IF., THEN..." 
command to include an "ELSE" statement with 
which the progranuner may slate explicitly what 
the program is to do if the expression following 
the "IF" evaluates as FALSE. A few languages 
extend the concept even further by including 
the "ELSE IF" statement to allow the explicit 
condiiiona] sequencing of decisions. Although 
the functions performed by the "ELSE" and 
the "ELSE IF" extensions to the "IF" 
statement may be simulated by appropriate use 
of the simple "IF... THEN..." command 
structure and branching commands. "ELSE" 
and "ELSE IF" add considerable clarity to the 
structure and flow of the program. For this 
reason, they have been included in virtually all 
structured programming languages, such as 
PASCAL. 



This anicle describes a short machine- 
language "patch" to Apple's floating-point 
BASIC. Applesoft BASIC, that extends the 
BASIC "IF .. THEN..." command to allow 
both "ELSE" and "ELSE IF". The patch will 
work for the complete series of Apple [[ 
computers under the DOS 3.3 environment. 

Command Structure and Syntax 

The syntax of the Applesoft BASIC "IF... 
THEN..." command as described in the 
Applesoft BASIC Reference Manual 
(1978/1981) is: 

IF expr THEN {:} [{:instruction(] 

where "expr" refers to any legal Applesoft 
BASIC expression, "instruction" refers to any 
legal Applesoft BASIC statement, and "|{: 
instruction}]" refers to an optional extension 
of the program line that will be executed only 
if "expr" evaluates a.s TRUE (i.e., any non- 
zero value). Because conditional branching is 
a common occurrence, Applesoft BASIC allows 
conditional branch statements to be abbreviated: 



IF expr THEN [GOTO] linenum 



and 

IF expr fTHENI GOTO linenum 

where the bracketed command is implied, For 
each of these statements, if "expr" evaluates 
as FALSE (i.e., equal to zero), program 
execution branches to the next numbered line 
of the program, ignoring in the process any 
instructions following the "THEN". The 



machine-language patch is transparent to these 
statements: with the patch installed they still 
function as described, 

ELSE and ELSE IF 

With the patch installed, all versions of the 
"IF,.. THEN..." statement may be extended 
on the same program line with the statement 
":ELSE:". Note that the colon is required b»ith 
as a prefix and a suffix of the "ELSE" 
statement; otherwise. "ELSE" is assumed to 
be a variable name and will be ignored by the 
patch. The basic syntax is: 

IF expr THEN {:} [|:inslruction} 
{:ELSE:} {instruction}] 

The instruction(s) following the "ELSE" will 
be executed only if "expr" evaluates as 
FALSE, whereas the instruction(s) preceding 
the "ELSE" but subsequent to the "THEN" 
will, as usual, be executed only if "expr" 
evaluates as TRUE. 

Conditional sequencing of decisions (i.e., 
"ELSE IF") is effected by following the 
"ELSE" statement, either immediately or 
subsequent to other commands, with an "IF" 
statement, as in: 

IF X THEN 10fl«:ELSE:IF Y THEN 

'I AAA 
JiVVV 

Multiple "ELSE" statements on the same 
program line are allowed. Each "ELSE" 
statement is associated with the most recent 
"IF" statement on the same line that is not 
already associated with a preceding "ELSE" 
statement. That is, "IF" and "ELSE" 
statements are associated in nested- pairs in a 
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manner similar to nested "FOR... NEXT" 
loops. More "ELSE" statements than 
preceding "IF" statements on the same 
program line, if executed, result in a 
"SYNTAX ERROR" in a manner similar to 
a "NEXT WITHOUT FOR" error. 

GOTO and GOSUB 

The Applesol;i BASIC statements ' •GOTO' ' 
and "GOSUB" (and their ON... GOTO / 
GOSUB variant's) cornphcate the meaning of the 
same line rule For "ELSE" statements cited 
earlier since both of these commands result in 
'^ branch from one line of BASIC code to 
another. For the purposes of the "ELSE" 
patch, the program line branched to is 
considered to be an exten.sion of the program 
line branched from all subsequent lines, 
however, even with a subroutine, arc 
considered to be new lines. 

This complieation is of no consequence for 
"GOTO" commands, but it can limit the 
effectiveness of "ELSE" statements in program 
lines containing conditional "GOSUB" 
commands (e.g., IF X THEN GOSUB 
100:ELSE; .,.). The problem arises if the 
subroutine terminates with a "RETURN" 
statement on a program line subsequent to the 
one branched to by the conditional "GOSUB" 
statement, or if the "RETURN" statement is 
the last command on the program line even 
though the litve is the one branched to. In both 
cases, the "ELSE" patch will detect an end- 
of-line (EOL) token, effectively forgetting the 
prior "IF" statement that initiated the branch. 
Upon encountering any "ELSE" associated 



with the now-forgotten "IF", the program will 
halt with a "SYNTAX ERROR". The cure for 
the problem is a simple rule: Never precede 
an "ELSE" statement with a conditional 
"GOSUB" statement. This rule is less severe 
than it sounds since the rule is satisfied if the 
"GOSUB" statement follows the "ELSE" 
statement rather than the "THEN" statement 
of an "IF • ELSE" pair. For example, the 
program line: 

1» IF X THEN GOSUB 1W:ELSE: 
PRINT X 

will crash with a "SYNTAX ERROR" on the 
"ELSE" statement upon RETURNing from a 
multiple-iine subroutine at line 100. However, 
the logically equivalent program line: 

1» IF NOT X THEN PRINT X:ELSE; 
GOSUB IW 

will execute correctly. 

Installing the Patch 

Start by using the instructions on page 2 of 
this magazine key in the hexdump and save it 
with: 

BSAVE ELSE.OBJ,A$3»»,L$9C 

It is assembled to reside in page three of 
memory, but may be re-assembled with a 
different origin to be located elsewhere (say. 
above HIM EM). BRUNning the object code 
from disk (or BLOADing it, then CALLing 768 
from BASIC) will install the patch on the 
system. The patch will remain active until 



Applesoft BASIC is cold-started (i.e., either a 
re-boot of the system or ihe DOS 33 "FP" 
command). The patch is interfaced to Applesoft 
BASIC through the Applesoft CHRGET 
routine. Discussion of this approach to patching 
Applesoft BASIC may be found in Kaner and 
Vokey (1982) and Mossberg (1982). 

It should be noted that CHRGET patches will 
not function with the ProDOS BASIC operating 
system. 

Examples of the ELSE Statement 

The simplest and prohably the most common 
use of the "ELSE" command is exemplified 
by the following program line: 

IW IF X THEN PRINT "TRUE" : 
ELSE : PRl.NT "FALSE' 

Execution of this line will prim "TRUE" if X 
<> B, and "FALSE" if X = 0, Program lines 
of this sort may be used to replace the more 
cumbersome line combination normally 
required in Applesoft BASIC: 

IB* IF X THEN PRINT "TRUE' 
1 10 IF NOT X THEN PRINT 
"FALSE- 

An example of the conditional .sequencing of 
decisions (i e., ELSE IF) is given by: 

IWJ IF X THEN PRINT "TRUE" : 
ELSE : IF Y THEN PRINT "TRUE" 
: ELSE ; PRINT "FALSE' 

In this case, execution of the line will print 
"TRUE" if either X <> or Y <> 0. and 
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"FALSE" if both X = and Y = 0. 

The real pi)werofihe "ELSE" Lommand, 
however, arises with the ability to nest "IF - 
ELSE" combinations. For example: 

tM IF X THEN PRINT "X-TRUK': : 
IF Y THEN PRINT " + V-TRUE" : 
ELSE : PRINT " + Y-FALSE" : 
ELSE : PRINT "X-FALSE" 

IfX <> 0. then execution of the statement will 
prim either "X-TRUE + Y-TRUE" or "X- 
TRUE + Y -FALSE" depending upton whether 
or mil Y <> 0, On the other hand, if X =0, 
execution of the statement will print simply 
"\-FALSE'. 

Further examples of using the "ELSE" 
command may be found in the Applesoft 
BASIC program "IF.THEN. ELSE. DEMO" 
shown in Listing 2. 

Notes on the Patch 

Applesoft BASIC is an interpreted language 
• meaning that execution of a statement involves 
the action of an interpreter that first determines 
what opcrationtsi are to be performed and then 
calls the appropriate roinines{s). Full details of 
this process may be found in Kaner and Vokey 
(1982) and in many of Dr. Mossberg's 
Disassembly Lines columns in Nibble 
Magazine. 

To effect this process, the interpreter 
"reads" the statement using a short routine 
known as CHRGET. Unlike the reniaimjer of 
Applesoft BASIC, this routine resides in R.AM 
and. hence, is modifiable. Redirecting calls lo 
this routine to the ELSE patch allows the patch 
to interpret any statement before it is passed to 
the interpreter. In this way, the patch is able 
10 determine whether an "IF" statement is to 
be executed, and is able to monitor for pending 
"ELSE" commands. 

If an "IF" statement is encountered, the 
patch evaluates the expression following the 
"IF". If ihc result is FALSE (i.e.. equal to0). 
the patch scans the remainder of the program 
line for an "ELSE" statement, noting any 
subsequent "IF" commands in the proce,ss. Jf 
a matching "ELSE" statement is found. 
TXTPTR (a pointer to the next character in the 
program line) is advanced to the statement 
following the "ELSE" and control is returned 
to the interpreter. Otherwise. T.XTPTR is 
advanced to the next program line. 

If the result of the expression evaluation is 
TRUE (i.e., not equal to 0), control is passed 
to the routine that normally handles execution 
of TRUE "IF" statements, and a flag is set to 
indicate to the patch that any matching "ELSE" 
(and all ct)de following it) subsequent to the 
"IF" on the same progratii line is to be ignored 
(i.e., not sent to the interpreter). Monitoring 
for a pending "ELSE" occurs until one is found 
or until an end-of-linc token (EOL) is 
encountered. Thus, "ELSE" statements not 
preceded by a matching "IF" will be passed 
to the interpreter with a "SYNTAX ERROR" 
as the correct result, and "ELSE" statements 
and their associated code preceded by a 
matching TRUE "IF" will not be executed. 
Similarly, the code following the "ELSE" 









ELSE.OBJ Source Code 








OR S300 








* 
« — 




TF ELSE Oej 




- ^ 






IF 


.THEN. .ELSE 




Copyright (c) 1985 . 


* 






Soflkey Publishing 


* 


* 








EQUATES 


ft 


'^ 










HA 


00B1 


- CHRGET 


E(3 SBl 


CHRGET routine 




00B7- 


- CHffiOT 


EQ SB7 








00B8- 


- TXTPTR 


EQ SB8 


TeXT PoinTeR 




D07B- 


- FRMEVL 


EQ SDD7B 


FoRMula Evaluation 




D9E1- 


- INIF 


EQ SD9E1 


PART OF 


F routine 




a0AD- 


- IFF 


EQ SAD 


IF token 






a0AB 


- GOTO 


EQ JAB 


GOTO toke 


n 




00C4 


• THEN 


EQ $C4 


THEN iDke 


n 




D9DC- 


- IFEXIT 


EQ $D9DC 


FALSE- IF 


en it 




0064- 


- ELSFLG 


EQ CHRGET+3 Else stateraem to skip over? 




009D 


- FACEXP 


EQ $90 


FAC exponent 




0005- 


- LENGTH 


EQ $5 


length of 


'ELSE: 




DEC9- 
* 


- ERROR 


EQ $0EC9 


SYNTAX ERROR 


$ 










NiTIALiZE 




0300 


A9 « 


INIT 


IDA *S4C 


load a 'JMP' 




0302 


85 BI 




STA CHRGET 


Store at CHRGET 


' 


0304 


A9 0D 




LDA *ISTART 


low byte of interpreter 




0306 


85 B2 




STA CHRGET+I 






0308 


A9 03 




LDA ..'START 


high byte 




030A 


85 B3 




STA CHRGET+2 






030C 


60 




RTS 


and return to BASIC ' ' 


t 


* 






SCAN F 


OR PENDING ELSE 
pending ELSE? 


* 
* 


030D 


A5 84 


START 


LDA ELSFLG 


030F 


F0 IB 




BEQ NOELSE 


No. go 




0311 


98 


ELSCHK 


TYA 


Ves. save Y 




0312 


48 




PHA 


on stack 




0313 


A0 05 




LDV LENGTH 


use Y as (fidex 




0315 


Bl B8 


LOOP0 


LDA (TXTPTR) 


V Get CHAR 




0317 


09 96 03 




CMP CttD.Y 


Match? 




03 lA 


D0 flE 




BN£ FIXV 


No, go 




031C 


38 




DEV 


Ves. try next 




03ID 


10 F6 




BPL LOOP0 






03IF 


A9 00 




LDA «0 


Clear FLAG 




0321 


85 64 




STA ELSFLG 






0323 


68 




PLA 


Adjust stack 




0324 


20 DC D9 




JSR IFEXIT 


Move TXTPTR to EOL 




0327 


4C B7 00 


OUT 


JMP CHRGOT 


and eKil. 




03 2A 


68 


FiXV 


PLA 


Recover Y 




0328 
4; 


A8 




TAY 




•^ 


* 

« 








IF CHECi^ 


* 










.. 





^ 
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032C 


20 80 03 


NOELSE 


JSR ADVTXT 


Next CHAR 




fl32F: 


C9 00 




CMP #0 


EOL' 




0331. 


D0 04 




BNE IFTST 


NO, test 'IF' 




0333. 


85 B4 


EOLOUT 


STA ELSFLG 


dear FLAG 




0335 


F0 F0 




BEQOUT 


always taken 




0337. 


C9 AD 


IFTST 


CMP #IFF 


IF Token' 




0339. 


00 EC 




BNE oirr 


No, exit 




0338 


20 80 03 


1 FEVAL 


JSR ADVTXT 


Yes. next CHAR 




033E 


20 7B DD 




JSR FRMEVL 


Evaluate e.)tpression 




0341 


A5 90 




LOA FACEXP 


TRUE or FALSE (1 or 0)' 




0343 


F0 10 




BEQ TKELSE 


FALSE, take ELSE 




0345 


85 B4 




STA ELSFLG 


TRUE, flag pending ELSE 




9347 


20 B7 00 




JSR CHRGOT 


Recover CHAR 




034A 


C9 AB 




CHP #G0TO 


GOTO token' 




034C 


F0 0E 




BEQ DOIF 


Yes. (to It 


-•ii' 


034E: 


C9 C4 




CMP #TH£N 


THEN token' 




0350. 


F0 03 




BEQ OOIF0 


Ves. do It 




0352 


4C C9 DE 




JMP ERROR 


No, SYNTAX ERROR 




0355, 


20 BD 03 


OOIF0 


JSR ADVTXT 


Get CHAR after 'THEN' 




0358 


C9 AD 




CMP BIFF 


IF token? 




035A. 


F0 OF 




BEQ 1 FEVAL 


yes, evaluate it 




035C 


20 El 09 


DOIF 


JSR INIF 


Oo THEN. 




035F 

^ 


4C S7 00 




JMP CHRGOT 


and exit 


* 

* 
4( 


ZJC 








TAKE ELSE 


0362. 


E6 90 


TKELSE 


■INC FACEXP 


'IF' count 




0364: 


20 80 03 


LOOPl 


JSR ADVTXT 


next CHAR 




0367. 


20 87 00 


L0OP2 


JSR CHRGOT 


Recover CHAR 




036A: 


F0 06 




BEQ TSTEOL 


If Z then test for EOL 




036C' 


C9 AD 




CMP #IFF 


IF token' 


, 


036E. 


00 F4 




BNE LOOPl 


No, try next 




0370. 


F0 F0 




BEQ TKELSE 


Yes, increment count 




0372. 


C9 00 


TSTEOL 


CMP «0 


eol' 




0374: 


F0 BD 




BEQ EOLOUT 


Yes, exit 




0376: 


A0 01 


TSTELSE 


LDV SI 


index 




0378 


20 80 03 


L00P3 


JSR ADVTXT 


ne«t CHAR 




037B 


D9 96 03 




CMP CMO.Y 


match? 




037E. 


D0 E7 




BNE L0OP2 


No. try next 




0380. 


C0 05 




CPy "LENGTH 


Yes, done? 


1 


0382. 


F0 03 




BEQ TSTELSE2 Yes. one down... 




0384 


C8 




(NY 


No, 




0385: 


00 Fl 




BNE L00P3 


go again 




0387 


C6 90 


TSTELSE2 DEC FACEXP 


any nore to go? 




0389, 


00 EB 




BNE TSTELSE 


Yes. do it 




038B: 
* 


F0 9A 




BEQ OUT 


No, exit 




jji 






ADVANCE TXTPTR 


^ j^ 


0380 


E6 B8 


ADVTXT 


INC TXTPTR 


Replace cttrget 




038F 


m 02 




BNE ex;t 


to al low processing 




0391 


E6 69 




INC TXTPTR+1 


of BASIC cormands. 




0393 


4C B7 00 


EXIT 


JMP CHRGOT 




- 


0396 


3A 45 4C 










0399 


53 45 3A 


CMD 


.AS " ELSE.' 




i* 





statement of a maiehing FALSE ■IF" will bi; 
executed in place of ihe code immcdiaiely 
following the "IF'. 

Suggestions on Extensions 

One obvious extension to the patch is to 
remove the "on the same line" rule. Thi.'i 
e.Ktension could be implemented by having the 
routine monitor b«Lh wiihiti und aero<.s program 
lines for, say, an "EN DIP" statement, rather 
than an EOL before ceasing its search for a 
matching or a pending "ELSE" statement. 
While such an approach has muL-h commending 
it {it would, for example, emulate the Pascal 
language's implementation of "IF"), it also 
would require that ull "IF" staieiuents be 
followed at some point in the program by the 
"ENDIF" statement, eliminating BASIC'S 
usual (and often useful! handling of "IF" 
commands. Moreover, it would require some 
method of keeping track of nested "IF" 
statements, subroutines called from within "IF 
- ENDIF" blocks, and numerous other details 
thai may render the approach toti un wieldly for 
the gains made. 

Another extension is to modify the routine 
so thai it will function from within the Pro DOS 
BASIC system. Since patches to CHRGETdo 
not work under the Pro DOS BASIC system, an 
alternative approach is to flag all "IF" and 
"ELSE" statements with ampersands, and use 
the Applesoft BASIC ampersand vector lo 
transfer control to the (appropriately modified) 
"ELSE" patch. 
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0300 


fl9 4C 85 Bl A9 0D 85 B2 


SF260 


0308 


A9 03 85 B3 60 A5 B4 F0 


SF762 


0310 


IB 98 48 A0 05 Bl B8 D9 


S8C3C 


0318 


96 03 D0 0E S8 10 F5 A9 


SCAIE 


0320 


00 85 B4 68 20 DC D9 4C 


S9B47 


0328 


B7 00 68 AS 20 BD 03 C9 


S37B1 


0330 


00 D0 04 85 B4 F0 F0 C9 


S7773 


0338 


AD D0 EC 20 BD 03 20 7B 


SD7E9 


0340 


DD A5 9D F0 ID 85 B4 20 


S1DF0 


0348 


B7 00 C9 AB F0 0E 09 C4 


S2D05 


0350 


F0 03 4C C9 OE 20 8D 03 


S73A2 


0358 


C9 AD F0 OF 20 El D9 4C 


SE251 


0360 


B7 00 E6 9D 20 80 03 lH 


SE107 


0368 


B7 00 F0 06 C9 AD D0 F4 


S31AA 


0370 


F0 F0 C9 00 F0 BD AS 01 


S63Ee 


0378 


20 8D 03 D9 96 03 D0 E7 


$9940 


03B0 


C0 05 F0 03 C8 D0 Fl C6 


$1FD7 


0388 


9D D0 £B F0 9A E6 B8 D0 


i7BlE 


0390 


02 E6 B9 4C B7 00 3A 45 


J46CB 


0398 


4C 53 45 3A 


I8E58 

3t 
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softkey for... 



Bank Street Speller 



By Jeff Lucia 



Bunk Street Spetler 

Bntderiwini Si>fiwtre, Inc. 

17 Paul Drive 

San Rtifaet. CA 94903 

S70.m 



Requirements: 

A biank disk 

Bank Street Speller 

An NMI card or a way into the Monitor 

(opiional) 

At least 48K 

COPYA 

Note: This procedure only works if y(»u 
have not used the copy feature on Banlt 
Street Speller. If vou already have, the copier 
has been destroyed. 

It is well known that Broderbund probably 
Kas always had the best protections, from the 
release of Lode Runner, to the current dilemma. 
Bank Street Speller, henceforth referred to as 
BSS. Broderbund must spend a lot of money 
in creating their protections, but it is worth it 
for the reduction in pirated copies. 

When 1 first purchased BSS I thought it 
would be easy to backup. Usually, no matter 
what program I buy . I can manage to bit-copy 
it. However, the scene changed dramatically 
when 1 tried to backup BSS. No such luck. The 
copied disk worked fine until it checked track 
S80 for a certain pattern of bytes. No matter 
how hard I tried to re-vopy track $00 and match 
those bytes, the copy would always fail. 

Lately tht>ugh, Bnxierbund has added a 
feature that lets the user obtain ONE backup 
of the disk. This is fine and dandy, until btith 
the backup and original die. Then it will cost 
you S5.00 for each new backup. The only way 
I was able to obtain more than one backup was 
to modify this feature so it will not write to the 
original disk and tell it that you have already 
backed-up the disk, 

BSS has a unique copier because it will check 
if the disk has already been copied in several 
places. Our objective is to find out how BSS's 
copier prevents you from making more than one 
backup, and how to utilize it in such a way that 
it will let you make as many backups as you 



need. The an.swer is simple. To find out how 
BSS prevents you from making more than one 
backup, just put a write protector on your 
original disk. Sooner or later, the program will 
ask you to remove the write protect tab. This 
occurs when the copier is reading tracks 1-9. 
While it's reading those tracks, it will try to 
write, on track S01, that you have made your 
one backup. Finding a way to utilize BSS's 
copier to mass pnxiuee backups is a little harder 
to do. 

In order to produce many backups of BSS, 
we must find the exact routine which will cheek 
to see if the disk is write protected. Next, find 
the routine which tries to write to track $01 . 
Last but not Ica.st, change the routine so it 
doe.sn'i check at all (just makes you backups). 
So, let u.s explore the following roufine which 
docs the cheeking: 



42EC- LOY S09 
42EE- m m 
42F0- JSR I40ED 

42F3- JSfi IB400 
4ZF6- JSR $B40F 
42FE- BCS S430E 



START TRACK J09 
END TRACK S01 

PREPARE TO READ 
READ TRACKS INTO S5000 
AHEMPT TO WRITE 
SAY "HRITE PROTECTED" 



430C- eCC S4314 , IF OK. GO WRITE 
4311- JSR S42EC ; IF NOT OK. GO READ 

What does this mean? Well, S42EC tells 
the copier which track to stan on and $42 EE 
teils the copier which track to end on. Now we 
hit the routine which gets the copier ready to 
read tracks $01 - $fl9 this routine is S42F0. 
Looking at S42F3 we will find out that it turns 
on the drive and reads in the tracks. Finally, 
we have found the routine which does all the 
checking. At $42F6 the copier will try to write 
to the original disk and tell It that you have made 
your ONE backup. The rest of the routines that 
1 have listed ($430C & 431 1) ju.st ask you to 
remove the write protect tab then stan reading 
from track $09 again. 

There are two ways to defeat the cheeking 
routine, an easy way and a hard way, I gather 
that you all want to do it the easy way, but 
unfortunately those of you who don't have any 
means of entering the Monitor must use the hard 
way. 

Note: Always keep your original BSS disk 
w rite-protected during this procedure. Do not 
take it off until you have finished making the 
number of backups desired. 

I " The Easy Way 

1) Write-proteet your BSS disk. 



2) Boot it up. 
PR#6 

3) Hit Escape to enter the copier. 

4) When the menu appears, enter the Monitor 
by your favorite means, 

5) Once in the Monitor, change $42F6-42F8 
to JSR $4314, 

42F6:2ft 14 43 

6) Execute the copier. 
4eMG 

7) Use COPYA on the dictionary side. 

8) Congratulations! You now have no excuse 
to ever make a spelling error again! 

The Hard Way 

1 ) Writc-protect your BSS disk. 

2) Boot it up, 

3) As soon as the Logo has been toiaJly loaded, 
open the disk dnve door and then hit reset. 
When you get an "R" in the upper left hand 
comer, hit reset again. Hit reset one more time. 
You should now have an Appte.soft prompt. If 
you don't get a prompt, keep hitting reset until 
you do. 

4) Enter the Monitor and close the drive door. 
CALL-151 

5) Make these necessary mix! ifi cat ions to the 
program residing in S9000 so it will read the 
Utility Menu. 

91W>: 4C 59 FF 
B4mG 

9«F9G 

(reads the Utility Menu into $IE00) 
If, for soinc reason, the Utility Menu doesn't 
read in, repeal steps 1-5, 

6) When the computer beeps you should be in 
the Monitor. If not, repeat steps 1-5, Modify 
the huilt in copy program so it doesn't write 
to the original, 

42F6:2» 14 43 

7) Run the program 

8) Copy the disk. 

9) COPYA the dictionary disk. 

To make other backups just u.se the procedure 
again, always using the original BSS. Hopefully 
none of you will ever have spelliijg errors agam. 
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softkey for... 

Where In The World Is Carmen Sandiego? 



by Ronald Wilson 



Broderbund Software 

17 Paul Dr. 

San Rqfael, CA 94903 



Requirements 

Apple )[. 64K minimum 

ModifieU F8 ROM in Hardcore COMPUTIST 

No. 19 
DOS 3.3 (or a fast DOS) 
A blank disk or two 



"Where In the World Is Carmen Sandiego?" 
is a new and interesting release from 
Broderbund Software. By playing the game, we 
can learn something about the euftures of other 
countries. However, the program is heavily 
protected. 

Developing the Softkey 

I started by installing the modified F8 ROM 
(Hardcore COMPUTIST No. 19) in my apple 
//e and btwling the Carmen Sandiego disit. 
When the title page appeared, I hit the Reset 
key. The modified ROM should have stopped 
and waited for me to press a key, but the 
program cleared the screen and rebooted. After 
rebfxjting the disk, I saw that the red lights on 
my Microsoft RAM card were on when the title 
page appeared. This meant that the program 
was using the 16K RAM card for itself. 
Fortunately, the red lights went off after a man 
had appeared on the screen. Then 1 pressed 
Reset followed by M to go directly to the 
Monitor. Lwiking through memory, I found 
that HIRES pages 1 and 2 were not used. I used 
the search routine of the modified ROM to try 
to find the cmr>' point of the program. I tried 

2m:F¥ 3 AD se C0 N StW.BFFFS 

to find out where the graphic mode was turned 
on. A bit of searching determined that the entry 
point was $6000. Then i relocated parts of the 
program as follows: 



Original 
Local i on 



Relocated 
To: 



Number of 
Pages 



S0000-e7FF S2100-28FF 18 

$8800-lFFF $0800- IFFF $18 

$60e0-88FF $5000-88FF $29 

$B900-BFFF $2900-5FFF $37 



Then I wrote a iiestart routine at $2000 to 
relocate the program, turn on the RAM card 
and jump to the entry point. I saved all thccixle 
to disk as a file named "CAR". Then 1 wrote 
a short routine to save the RAM card's banks 
1 and 2 to disk, and another routine to restart 
the RAM card, turn it off. and BRUN the file 
"CAR", We now have die boot side of Carmen 
Sandiego in the form of binary files, while the 
other side was COPYAable in the first place. 

Step by Step 

1) INIT a blank disk to create a slave disk with 
no HELLO program. 

IMT HELLO 
DELETE HELLO 

2) Boot the Carmen Sandiego disk. After the 
man appears, press Reset, followed by "S" (to 
Save the lower 8 pages of memory). 

3} Boot your slave disk so you can save the 
lower RAM to disk. 

6 lGiP] 

BSAVE P«-P7.A$2Wte.L$8ee 

4) Boot the Carnien Sandiego disk again. After 
the man appears, pre.ss Reset followed by "M" 
to enter the Monitor. 

5) Move some of the code out of the way to 
a safe place. 

2»m<m%.S¥FM 
29e«<89e«.BFFFM 

6) B(wt the slave disk, 

6 (3Pl 

7) Move the code that lived at $800 back where 
it was. 

CALL- 151 

8M<280«.28FFM 

8) Type in the restart program (Hexdump 1) 
after this softkey. This will set things up for 
the program to run. 

9) Get the lower memory that you saved earlier 
and put it at $2100. 

BLOAD P«-P7.A$2ie» 

18) Modify the program so that nothing new 
is put into the R,AM card. 

6e34:EA 
6e35<6e34.6ft53M 

11) Fi.K DOS so you can BSAVE more than 
$8000 bytes. 

A964:FF 

12) At $7FD. put a JuMP to the restarting 
routine at $2000. Then BSAVE the main part. 



7FD:4C m 2» 

BSAVE CAR,A$7FD,L$8l«3 

13) Tyfjc in Hexdump 2. This is a shon routine 
to move RAM card memory to S 1000. Execute 
h with 

EWG 

14) Type in Hexdump 3, This one puts the 
memory at $ 1000 back into the RAM card and 
BRUNs the file "CAR". BSAVE it and the 
RAM card memory. 

BSAVE CARMEN SANDIEG0,A$FM,I-$41WI 

15) COPYA the other side to another blank 
disk, or use the back side of your newly 
deprotected Boot disk. 



Hexdump 1 (program restart) 


2000 


AD 52 C0 AD 57 C0 AD bS 


iCC16 


2008 


C0 A0 08 A2 00 BD 00 21 


t7ElF 


2010 


9D 00 00 E8 D0 f! EE 0F 


$69A5 


2018 


20 EE 12 20 88 D0 EC A0 


S8A37 


2020 


37 A2 00 BD 00 29 90 00 


SF942 


2028 


89 E8 00 F7 EE 25 20 EE 


$364F 


2030 


28 20 88 D0 EC AD 83 C0 


$2A70 


2038 


AO 83 C0 40 00 60 00 00 


$81FC 


Hexdump 2 (RAM card to $!*»«) 


0E00 


A0 00 AD 80 00 A2 10 B9 


SBD0E 


0E0a 


00 00 99 00 10 08 D0 F7 


S3414 


0E10 


EE 09 0E EE 0C 0E CA m 


S3C0E 


0E18 


EE AD 8B C0 AD SB 00 99 


SCFDF 


0E20 


00 D0 99 00 20 08 D0 F7 


19E55 


0E2S 


£E 24 0E EE 21 0E D0 EF 


J477B 


BE3a 


AD 81 C0 60 


$10AB 


Hexdump 3 ($1000 to RAM card) 


0F00 


20 58 FO AD 81 C0 AD 81 


J3281 


0F08 


00 A0 10 A2 00 BD 00 10 


$9DB8 


0F10 


9D 00 00 E8 D0 F7 EE 0F 


$12E1 


0F18 


0F EE 12 0F 88 D0 EE AD 


$F5A6 


0F20 


86 00 AD 8B C0 BD 00 20 


$AE33 


aF28 


9D 00 D0 E8 00 F7 EE 27 


$798E 


eF30 


0F EE 2A 0F D0 EF AO 81 


S9895 


0F38 


00 20 58 FC 20 E0 9£ A2 


$2904 


0F*0 


38 A9 A0 9D 75 AA CA D0 


S9E6A 


0F4e 


F8 A9 03 80 75 AA A9 CI 


S4CA0 



0F50: 8D 76 AA A9 02 80 77 AA S45CA 
0F58 4C 8E A3 00 SA002 
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softkey for... 



LLii^Lis m\^\mi 



By Jurdi Le Vant 



Bank Street 


Writer //c 




Broderbund 


Software. 


Inc. 


! 7 Paul Drive 




San Rafael. 


CA 94903 


-2101 



Requirements 

48K and up (The program requires 128K) 

Super lOB vl.5 

A sector editor 

A slave disk with deleted HELLO 

A blank disk 

If you have a lie, you need the disk controller 

ROM from a ]| or //e saved as a binary 

file. 



Although the program requires an Apple //c 
or a lie with 128K lextended 80 column card) 
to run the program, you don't need that to crack 
the program. All of the tracks except have 
fairly norma! sectors, but with modified address 
and data Held headers and trailers. Track 0, 
sector is almost normal with the exception of 
a bad ehecksuin. which the controller card 
ROM doesn't check while booting. 

When the program is btKited, this seaor is 
loaded into page $08 and is jumped to at 
location S080 1 from the eontroller card ROM 
(bootO). This program at page S08 (boot 1) dien 
loads the main loading program at page SI4 to 
page SI A. This loader is all on track zero and 
is one long stream of data which can't be read 
easily with Super lOB if at all. [ resorted to boot 
tracing the first two parts of the boot process 
to get this loader into memory. 



1) First get into the monitor. 
CALL-151 



2) Move the controller card ROM into RAM 
so we can change it to jump to the monitor 
instead of location $0SO1 after loading boot I . 

66F9:59 FF 
MtMG 

The drive will load in the first stage normally 
and return you to the monitor. 

3) Turn the drive off. 
C»E8 

4) Examining the program at page $08. you will 
find a JMP S 14(30 at l(X:ation S820. This jumps 
lo the program it loads off of track zero which 
is the main loader for the actual program. Since 
we want to stop after the main loader is in 
memory, boot 1 needs to be changed to jump 
to the monitor instead of the loader. 

82h5<l FF 

5) At this point, if you try to restart by typing 
66000 boot will load boot 1 again over the 
changes made. Location S6659 tells what page 
to load b(X)t I into, so you should change this 
to store it somewhere in ROM so as not to do 
any damage. 

6659:F0 

6) We had also changed the eontrnller ROM 
to jump to the monitor. This needs to be 
changed back to jump to boot i at its usual 
location. 

66F9:01 «8 

7) Now reboot the modified controller with 

66WG 

Then turn the drive off again. 

CBES 

Now you can examine the main loader from 
page $14 to page $1A. Since this program is 
fa.st at loading the main program I thought it 
would be great to modify u and still use it. 
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After searching for a while, I was able lo find 
the routines that searched for the headers and 
trailers. 

8) By making the following changes in memory 
the loader will be able to read normal sectors. 

I449:D5 
I453:AA 

145D:AD 

]4D4:DE 

I52E:D5 * ' 2 «-*- -^. 

!S38:AA 

154,1:96 

156A:DE 

9) Boot a slave diskette with a deleted HELLO 
program. 

C6MG 

1%) Save the loader program on disk for later. 
BSAVE LOADER,A$14»e,L$7ft» 

11} Now we need to make a modified RWTS 
to read ihe protected disk for Super lOB to use. 
Get imo the monitor and copy the RWTS to 
lower memory. 

19«»<B8ee.BFFFM 

12) Make the following changes to the RWTS 
you just put at SI 900, and save it onto your 
Super lOB disk. 

1 ASS: AS 

1A5F:96 

1A6A:BF 

1A91:<>A 

1A9S:18 60 

i9E7:[>4 

19F1:DS 

19FC:D6 

IA3S:D7 

tA39:18 60 

BSAVE RWTS.BSW2C,AS19e«.L$8tW 

13) Now you can use the NewSwap controller 
for Super lOB v! .5. The only changes are the 



name of the RWTS that is loaded, and the 
starling track is now I , since ever)' thing except 
track needs to be copied. 

Install Controller I with this softkey into 
Super lOB (using whatever method you use) 
and copy the original BSW //e disk. 

14) We are going to use Super lOB in a different 
way now. Since the Bank Street Writer' s loader 
is in a binary file al this point, we can BLOAD 
the loader file directly into the sector buffer and 
write it out a sector at a time onto track 0. The 
result will be that the portion loaded into S 1400 
{during the boot, not now) will be put in sector 
I , and stored sequentially from there until page 
$1 A is stored in sector 7, This can be done by 
hand with fancy sector editors, but making a 
program do it for you is easier {with no mess). 

Install Controller 2 with this anide into Super 
lOB. RUN Super iOB {don't format) and use 
h to "copy" die binary file to track 0, sectors 
1-7 of the copy disk. Just treat the disk with 
the binary file as the source disk, 

15) Start up your sector editor and load in track 
<D, sector from a normal DOS 3.3 disk. 

16) This sector usually loads RWTS into page 
$B7 and up when booting, so a couple of 
changes need to be made to load the BSW 
loader into page S14 and Jump to the correct 
location. Change the following bytes of the 
sector and write it out to track 0. .sector ot" 
the copy 

Byte Front To 



$4A 


S5C 


S4C 


$4B 


SFE 


m 


S4C 


S0S 


S14 


$FE 


iB6 


X13 



171 Now the disk should boot to the editor 
without any problems, but if you press Escape 
during the boot and go to the utility menu, you 
will not be able to save the changes you make 
onto your dc protected system disk. The utility 
program is in BASIC and makes a call to 
modifs' all the address and data field headers 



and trailers in its RWTS to save the changes 
Since all these markers are normal now, ihi: 
subroutine needs to be eliminated. You can d( 
this by changmg track 4, .sector 7. byte S3' 
from SA« io~$60. 

You now have a COPYAable backup of BanI 
Street Writer He. 

controller 1 

1000 REM BSW ■'■■'C CONTROLLEfi 

1010TK=1 :LT = 35 :ST = 15 ;LS=15 :CD = )VR:FAS' 

= 1 
1020 GOSUB 350 : GOSUB 490 GOSiJB 610 
1030 GOSUB 350 GOSUB 490 GOSUBBlfl : IFPEEt 

(TRK ) = LT THEN 1050 
1040 TK = PEEK (IRK) ST = PEEK (SCI) GOTO 102! 
1050 HOME PRINT "COPVOmE" . END 
10010 PRINT CHRi (4 ) "BLOAD' 

RWTS BSH2C,AS1900" 



controller 1 


checksums 


1000 


- S355B 


1040 - 


i055A 


1010 


- $2545 


1050 - 


$eB03 


1020 


- SC80a 


10010 - 


i2E18 


1030 


- $FA9C 






controller 2 


1000 REM BSA 


.■■■C LOADER CONTROLLER 


1010 CD = m 


GOSUB 490 






1020 PRINT 


CHR$ (13 


) CHRi (4 


) "8L0AD 


LOADER 


AI2700 S"SO",D"DV 




1030 n = 


ST=1 .CD = 


RD . GOSUB 490 


1040 GOSUB 430 : GOSUB 100 :ST = ST 


* 1 : 1 F ST - 


8 THEN 1040 






1050 HOME . 


PRINT "DONE 


' ; END 




controller 2 


checksums 


1000 


- S35SB 


1030 - 


SA5FA 


1010 


- S46B0 


1040 - 


S0BD4 


1020 


- SD5FC 


1050 - 


S05C4 ^ 

i 
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Word 



By Larry Jasonowicz 



Word Challenge 
Hayden Software 
60& Suffolk Sj. 
Lowell. MA. 0J854 
$39.95 



Requirements: 

Word Challenge 

A way into the Monitor 

Super lOB vl.2 

1 or 2 disk drives 

A blank disk 

Word Challenge is a word game sitnilar to 
Boggle in which you play against the computer 
(LEX). It sets up a matrix of letters and the 
object is to make as many words from this 
matrix as possible. There is an option to change 
many aspcct.s of the game (time limit, score, 
t of letters, etc). The rest of this article is 
soinewhat technical, so if you would like to just 
copy Word Challenge, skip to the section on 
just the steps necessary. 

The Challenge Begins 

I always like to have a backup of my disks 
in case of an emergency. 1 first tried Super lOB 
with the swap controller on Word Challenge but 
was disappointed when it could not read the 
disk. I also tried a couple of bit copiers but 



could mn gel a reliable copy. At this point I 
decided to attempt to determine the copy 
protection scheme and remove it. The first step 
is to examine the raw track data. My favorite 
disk "snooper" is CIA from Golden Delicious 
Software. As 1 was skimming the different 
tracks and sectors of the disk I was confronted 
by a nightmare. Every sector (except on track 
ffl) had a different set of address and data 
headers! Also, the sector numbers were strange; 
most were numbered above 0F. This meant 1 
must look at Word Challenge's RWTS and 
compare it to normal DOS 3.3 RWTS. The 
method (for any disk) is as follows: 

1) Boot the original disk, and after the drive 
stops get into the monitor your favorite way. 

2) Move the protected RWTS down to 51S05, 

l8W<B8e«.BFFFM 

3) Boot a normal DOS 3.3 Disk with a short 
HELLO program. 

C6»eG 

The protected RWTS is now at $1800 and 
normal DOS RWTS is at $B800. 

4) Then use the slightly unknown monitor 
command "V" (for Verify memory). 

18(M<B8ee.BFFFV 

TTiis will display the differences in the ranges 
of memory from SI 800 To SIFFF and SB800 
To SBFFF. 

To my disappointment there were very few 
significant differences between the two RWTSs 
(usually, the range of memory from $BB00 To 
$BC55 will be different because it holds a 
couple of buffers). 



The Challenge Goe.s On 



For lack of anything else to do. I decided to 
b(»t code trace, even though the Word 
Challenge disk loads data twice. (If you would 
like some tips on b<.x)t code tracing, see the end 
of this article.) The Word Challenge bcxjiing 
process jumps back and forth between pages 8 
and 9, and then fnmi nearly the end of page 
8 it jumps to $B400. From there it jumps to 
$B600 and then to $B70O. After examining the 
code from SB600 to $B7FF I found this is where 
the secret of the whole disk was. This is where 
the disk does all the loading, ctxling and 
decoding of the sectorsi The people at Hayden 
went through a lot of trouble coding the sectors 
and then hiding this change. They do some 
fancy EGRing and AN Ding the original sector 
number and then storing this value in the sector 
translate tabic (SBFB8 to $BFC7). They also 
pull different values from a table and store them 
in the data and address header read locations. 
At this point the sector is finally read into 
memor>'. Then the sneaky little rascals 
immediately restore these changes back to 
nc)rmal with some more fancy ctxJe so when 
examining SB80fl to SBFFF you will never 
notice the changes. 

I had to figure out a way to incorporate the 
coding/decoding scheme on the Word 
Challenge disk into Super lOB, Since Word 
Challenge uses the nonnal kKation lor the lOB 
($B7E8) and Super lOB uses $30A. I had to 
modify a small portion of the Word Challenge 
RWTS and save it as a fde. This file is then 
called just before and after reading each sector. 
Super lOB had to be modified slightly to use 
this file. 
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Challenge 



During ihe copying process, several bytes 
needed to be changed so that the copy can read 
a standard disk format. Here is a rundown of 
these changes: 

Track Sector 9yte From To 



S00 



S05 



S71 


SAC 


$28 


S72 


SED 


$18 


$73 


$B7 


$60 


S9A 


159 


$4C 


I9B 


$B8 


$68 


$9C 


SBF 


$B7 



Copying the Disk 




1) Type in the following code and save 


it 


BSAVE WORD,ASl8M,L$4F 




1800 AD 0E 03 


LDA $030E 




1803 -AC 0F 03 


LDY $030F 




1806 59 B8 BF 


EOR $BFB8,V' 




1809:48 


PHA 




180A 29 07 


AND #$07 




180C.AA 


TAX 




180D.0A 


ASL 




180E:0A 


ASL 




180F 0A 


ASL 




1810 0A 


ASL 




1811 19 B8 BF 


0RA $BFB8.Y 




1814:99 B8 BF 


STA $BFB8 y 




1817 68 


PLA 




1813 18 


CLC 




1819 60 0£ 03 


ADC $030E 




181C 29 07 


AND #$07 




181E A8 


JAY 




laiF.BD 32 18 


LDA $1832. X 




1822:BE 32 18 


LDX $1832, Y 




1825-8D E7 BB 


STA $B8E7 





1828. 8D 55 89 


STA SB955 


182B.3E Fl B8 


STX SB8F1 


1B2E 8E 5F B9 


STX SB95F 


1831.60 


RTS 


1832.D5 04 


CMP SD4.X 


1834:02 


IT) 


1335:CA 


DEX 


1836:AA 


TAX 


1837 :A9 A5 


LDA #SA5 


1839:95 00 


STA S00,X 


183B AC 0F 93 


LDY S030F 


ia3E:e9 88 BF 


LDA SBFBS 


1841.29 0F 


AND ff$0F 


1843:99 B8 BF 


STA SBFB8 


1846 A9 D5 


LDA »SD5 


1848 :A2 AA 


LDX m^ 


ie4A:20 25 18 


JSR $1825 


184D.18 


CLC 


184E:60 


RTS 



2) Install the controller at the ettd of this article 
in Super lOB and RUN. 

3) Run the program on Word Challenge (make 
sure the Hie WORD is on the same disk as 
lOB.OBJO). 

Track has standard DOS format, with the 
exception of sector 1 which is not used. So 
when Super iOB copies track fl it skips sector 
I . Line 1 00 does the coding and decoding of 
the sectors. 

Now, if only I could find all the words LEX 
does... 



controller 

100 BF = POUE TRK . TK . POKE SCT . ST POKE CHD 
,CD . IFTK = 0THEN103 

102 I F CD = RD THEN CALL 6144 : CALL 10 : CALL 6203 

: GOTO 105 

103 IFTK = 0ANDST=1THEN105 



104 CALL 10 

105 POKE BUF , PEEK (BUF ) + 1 : IF PEEK (BUF ) = 

> MB THEN BF = 1 
1000 REM WORD CHALLENGE CONTROLLER 
1010 TK = .ST = .LT = 35 .CD = WR 
1020 Tl = TK : GOSUB 490 : RESTORE 
1030 GOSUB 430 . GOSUB 100 . ST = ST + 1 , I F ST < 

DOS THEN 1030 
1040 IF BF THEN 1060 

1050 ST = TK = TK 4 1 : IF TK < LT THEN 1030 
1060 GOSUB 3 10 : GOSUB 490 TK = T1.ST = 
1070 GOSUB 430 : GOSUB 100 .ST = ST+1 : IFST< 

DOS THEN 1070 
1080ST = 0:TK = TK+1; IF8F = 0ANOTK<LTTHEN 

1070 
1090 IFTK<LTTHEN1020 
1100 HOME .PRINT ; PRINT "KmE* WITH' COPY" ; 

END 
5000 DATA 6* CHANGES 
5010 DATA ,5 .113 ,40 .0 .5 .114 
5020DATA0 ,5 .115 ,95 .0 .5 .154 
5030 DATA ,5 ,155 ,104 0,5 



10055 PRINT . PRINT CHRi (4 ) 



24 
76 

,156 .183 
BLOAD* WORD" 



controller checksums 


100 - $896F 


1060 


- S4F6A 


102 - $9CC9 


1070 


- S476F 


103 - $051B 


1080 


- $C699 


104 - $4C0D 


1090 


- $1E10 


105 - $EFD5 


1100 


- $A275 


1000 - $EC87 


5000 


- $770C 


1010 - $9E37 


5010 


- $E124 


1020 - $3868 


5020 


- $682F 


1030 - $2EB9 


5030 


- SF17B 


1040 ' $5E98 


10055 


- SA25B 


1050 - $4683 
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Hardcore COMPimST Is not related to B.M.E Enterprises in any way. 



THE 

SECURITY 

DISK 

PROTECTION / DEPROTECTJON 

Hafd-Core Programmers team up to give you software designed 
to Protect Your Private Files, Plus give you the ability to 
Analyze & Copy your other "Locked-Up" Disks to standard DOS 
3.3 format. Not Locked Up, Source codes included, A special 
"Tips & Techniques" program Included, For APPLE II series. 

PROTECTION SCHEMES 

PASSWORD PROTECTOR CATALOG MOVEfl NO-LIST PROTECTOR 

SINGLE/MULTIPLE PASSWORDS 
PROGRAM ENCRYPTION DISK Ef^CRYPTION 

DISUN: :THE DISK UNLOCKER 

UNLOCKS DISK PROTECTION SCHEti/IES RECOPIES TO DOS 3.3 

ANALYZE ANY APPLE II DISK 
REPAIRS DAfi/IAGEO DISKS RECOVERS LOST DATA 



NOT LOCKED UP 



1 OR 2 DRIVES 



To order send $29.95 CHECK/MO To: 

B.M.E. ENTERPRISES, P.O. BOX 191-H, KlU, MT 59920 

Dealer Inquiries Invited Phone 406-755-6816 



WHO 

LIKES 
THE 



HERE ARE JUST A 
FEW OF THE MANY 



an essaniisl pan ol the Apple-user & r^p^ioire - APPLE USER 




a valuable buy > 
APPLE PI" 



manual is pracltcdUv worth having on tts own -WASHINGTON 

worir> wainng tor" ' 



the tolks at Golden Deftcious should be commfinded 
HARDCORE COMPLfTlST 

muiih^aceied - NIBBLE 

themosicornprehansivediakacceasof I have ev«f come across -A B .VERNQN, 
CANADA 



Its abNiiy 10 unioci^ other pfograms will greatly help me' - OH B.P 
FRANCISCO CALIFORNIA 



&n excellent ^1 ai pragtami 
KEYNES, ENGLAND 



'very, wery eduCAtional 
TUCSON, ARIZONA 

Aueryflr^lighier^ing ptece C^ viUftara/bQ^ 
BLAJNE, MINNESOTA 



SAN 
pu^l grcal -ar^O good value too -EAS MtLTON 

d^real manual ... it is FANTASTlC'l - JC. 

lopot my list for good buys -HS 
R R . CHICAGO 



I like yours the BEST' 

Why all the enciiemenit about the ClA [conli{>eniiat tnlarmalion adviBOfs)'' 
Probattty because il is Ihe ONLV ^i o) ul^hiies fS m aih which enable even a 
begir^nei lo mvestigale. edi1. locate, list, irace. rescue, irans^ate. palch. repair. 
verily, examir>9. proiect, unproilficl, ar>aly5e, encrypt and decrypt programs on 
normal AND prelected disks You also gel Ihe CIA FiJes '. a &500Ci^ wo^d boot^ 
which contains (detailed m&rruchonK for Qsmgih^C I A pLuiseasy-To-loltow. hano- 
holdJng [uloriala abogi palching, repair, lorrnalling. encodmg, protection and 
numeioui other disk Topics You II hnd plenty ot material here which has newer 
belore appeareo in pnm PROGRAMS NOT COPY PROTECTED 

To put Ihe S C-IA. utJJitiesH Plue book, on the traJI of yoijr Apple ^l + . He, & Ifc djska. 
MTfd $65-00 by Chech or rmon^y order to: 

GOLOEN DELICIOUS SOFTWARE LTD. 
3S0 Fifth Avvrw*, Suit* 330A. Dvpl h, N*w Yprk, Nfw YQik lD1ia 




NOW 

AVAILABLE 

AT YOUR LOCAL 

COMPUTER STORE 



YOUR DISKS 



Warning: EDD is 
sold lor Ihe sole 
purpose ol 
making archival 
copies ONL Y. 



ESSENTIAL DATA DUPLICATOR III 



E DO mnsonAppEell.Oplus. JlcllcandApplelJIfin efTHiiBtron modef UBirig one or two dsK dnvea. 

EOD allowi yau to easily and quickly make back up coplej of your 
"uncopyable" Apple disks. ■ Since EDD has been preset to copy 
the widest range of copy-protections possible, you Just simply 
boot up EDD, put the disk you ^Mant to copy In one disk drive and 
a blank disk In the other (EDD wlll work using one drive also) 
arid In about 2 Vi minutes a copy Is made. ■ Unlike the "copy- 
cards" which only copy "single load" programs, EDD copies 
the entire disk. This would be similar to hooking up two 
cassette recorders, playing from Ofie, and recording to the 
other. ■ We have even Included an option so you can check 
the speed of your d Isk drlvM because drive speeds running 
fast or slow can damage disks and cause other problems. 
■ We publish EDD program lists (information about 
copy-protected disks) every couple of months, which 
EDD owners can receive. The current list Is Included 
\v(th the purchase of EDD. ■ The tjottom llr>e Is this; If 
EDD can't copy It, chances are nothing will. 

Ask ror EDD at your iDcat cornpyter atore. or, 

ro Ofdvr ilir^ct, send S7{I.9S plL>3 S? shipptnQ 



$7995 



($5 foretgn} Mastercard A/I sa accepted. 

Ke, 



Vepa/menf required. 



UTILICO MiCROWARE 

3377 Solano Ave., Suite #352 
Napa, CA 94558 {707)257-2420 



r 



THE P1DST POWERFUL BACK-UP UTILITY 
YDU'WE EUER SEEN,.. 




$59,95 addSS ship. 

» Back-ups 1/2, l/4, 3/4 tracks. 

''■ Automatic back-up options. 

^ No partns needGd for most of the back-ups. 

^ Excellent DQ5 copy on flip side. 

flsk for our other products RAP^-LOCK (for L-Smith) 
And also SHDUGI (Japanese chess-type game.) 

ART GALLERY 
Yoshinoya Bldg,A3B Sasu-machi.Chofu-shi 

Tokyo 182, Japan 
Send money or check. UISfl/TOSTER CARD accepted. 



DEALERS 

Overstocked on computer magazines 

that seem to have 

MORE ADS than articles? 

Pu t Hardcore 

COMPUTIST 

on your shelves, instead! 



Here's how: 

Send in the coupon below and we'll put your dealer 
info in the mail. DON'T WAIT! Apple computer users 
everywhere salute you! 



Yes' Please send me intormation on flow I can obtain copies or 
Hardcore COM PUT 1ST at Substantial savings. 



Dealer Name. 
Actdress 



City. 



State. 



Zip_ 



Send to: Hardcore COMPUTIST, PO Box 110816, 
Tacoma. WA 9641 1 or cail (206) 474-5750 



Unlock Software M u «teries! 

The Senior PROH //c,//e: fin affordable 
hardware & software device that combines 
many features into one. Included are: 

■nbillty to enter the Monitor FINV time. 

■ Capture a I I memory to a normal DOS disk. 

■ Restart a captured program from disk. 

■ Rdyanced sector, track, memory editor. 

■ ROtt residerit DOS tuith complete utils. 
•Read and edit copy-protected softtuare. 

■ Mini-nssembler, Step & Trace in ROn. 
■Study disk boots with Rfltl test pattern. 
■Copy volatile RAM to accessible ROM. 
■Copy all of Main RAM to Rux, or reverse. 

■ Nothing else like it available for the //c! 



The Senior PROM combines the functions of 
a "Copy Card", a nibble copier, a sector 
editor, an old F8 Monitor ROM and much 
more into a single device. Everything 
is in ROn, instantly available vhen 
needed. Does not use a peripheral slot 
and does not compromise compatibility! 

t88.q5. Ca I I 3 17-743-404 1 for ^j^ \1^ 
Mon-Fri, 10-5 EST. t79.95 checK or money 
order direct to: Cutting Edge Enterprises, 
Box 43234 Ren Cen Station, Detroit Ml, 
48243, Call modem 313-349-2954. Specify 
//c, or "Standard" or "Enhanced" //e ROMs. 




B m ^^ plus 

copy progrann 

FORGET ABOUT PARAMETERS. 

Get right down to iDocking up your Apple II soft- 
ware with tti© advanced, easy-to-use Echo Plus'" 

Now you can copy almost all, even the best 
protected disks without bothering with up to 500 
parameters as witti ordinary copv programs. Whatls 
more. Echo boots up in under d seconds, copies 
most disks in under 2 minutes 

For the toughest disks, you just switch to the 
exclusive automatic disk copier. It selects the right 
tracks, reads in and dndlyzes each, adjusts param- 
eters, then copies each trock, all automatically 

Echo Plus gives humans a break with an easy-to- 
read screen format, cursor -control led menus and 
real command flexibility. Plus o 42 page compre- 
hensive- and comprehensible- manual that even 
details several copy protection schemes 

You also get drive speed in RPMs. drive alignment, 
ceilify and erdse teatures. and a sophisHcoted 
track editor. 

If you can find a more powerful, easier to use 
program at d better price, buy it. If not, send us your 
checker money-ofcler now Only S59.95 plus S5.00 
shipping ond handling (In Massachusetts, add 
S3 00 soles tax) 

For the Apple II. Il-i-. lie, or He with at least dSK 
RAM and one disk drive [DOS 3 3). 



AT 



AGRA NAT SYSTEMS 

10 Winfhrop Circte, Weston, MA 02193 
Dealer inquiries Invlled. 



Order Form 

Issue Mag Disk 

S4.75 S9.'J5 
HC 24 D D 

HC 23 D n 

HC 22 n... D 

HC 21 n n . . . , 

HC 20 n n 

HC 19 n D 

HC 18 D n 

HC 17 ...n D 

HC 16 n n 

HC 13 n n.... 

HC 11 n n 

HC 7 n........n.... 

HC 4 D n 

HC 1 n ... . see below .... 

C 3 D D.. , . 

C 2 D D 

C 1 D.,.. see beiow .... 

HC 1 /C 1 disk only D 

Send me the bscK issues Indicated above: 

ID^ HC25 

Name^ 



Address . 

City 



State. 



-Zip. 



Phone_ 



VISA/MC 
Exp 



Signature . 

Send check or money order to: 

Hartjcore COMPUTIST, PO Box 1108^6-7. 
Tacoma, WA 98411 MoeI oidets shipped UPS 
Please use street address Washington residents 
add 7.8% sales tax. Foreign orders add 20% 

shipping and handiing. US funds drawn on US 
bank 

Offer good while supply lasts. 



Back Issues of Hardcore COMPUTIST 

and * GORE are PACKED with information that you won't want to miss! 



Hardcore COMPUTIST 24: Sottlteys lor Elecironrc Arts software. Groiiei software, Xypfiqs, F-IS SlrldE Eagl«, Injured Engine, Raaders' 

Sonii9^ to M' HotJOt Ana fiis Rotwi Faciory. AjjpfKiflin fl, WphJDel 2m. FatBDms 40. Story Maker, Early Gwibs Malcnmalter, flolwls Of Da*n, 

Features Esser\tia> Data Duplicalor copy pams: Cora. DifKl Sector Access From DOS 

Hardcore COMPUTIST 23: Softksys fm OopNIler, Mu^ot, Flasticaic, KarataM, (»*siDam, E-I Otaw; Heideis' Softlieys to Galo. Dino 

Eggs, Pintiali Construtjtior Set, TAG, Tfie Prim Stw)): Graphics Liijiar^, Osalti in The Caribtjeafi; Featuraj Using A R.O. To Softliey Mars Cars, How 

To Be The Writemaste!. Cote: Wheel Of Wimey 

Hardcore COMPUTIST 22: Softkoys ior twiner 2IM3er. IttOe Bunm. A2-Pfi1 Pmtiall Readers' Soilteys to Itie Haisl. Old Ironsittes. 

Grandma's House. In Searcfi ijl Ihe Most Amazing Tfttng. Wwlocs Tower, Ma/amter. Sargon III: Featurw Customiad Dnie Speed CwiKDl. Super 

106 version 1.5. Cat: The Macro System 

Hardcore COMPUTIST 2T:Sof!i(eys tor DB Master mrsrofl 4+ Dazjle Draw. Atction, Twerps. Readers' Softkeys lo Aoranceo Blackjack. 

Me^awtKks. Sum-net Games. College Enlrance Eiam Prep. Applewrilsr miM. Features: Demystifying Tlie Quarter Track. Cwe: Prosfiadow A 

PtolXSS Disk Monitor 

Hardcore COMPUTIST 20; SoNdeys for Sargon III, Wliadry: Pnjwng Grounds of ttie Mad OvMord arvd Knighl of Diamortds. Ttie Report 

Card (1 1 ami Kidwitei i AppJe [[ Boo; ROM Disassembly / Tfie Gi^Wc &^)t»i v3.tl / Copy 11+ S.D: A Reyie* l The KmN^Orive- A Hardware 

Evaluation I An Improved SAS'OBinary Comtw 

Hardcore COMPUTIST 19: Softkeys lor Rendeivous With Rama, Peachlree's Back To Bases Accouniing System. HSO Stslistics Series. 

* 'I ill met. est? Atthrriekicki ar>0 Early Games for ChildrBn I Double Voui ROM Space / The Games of 1984: In Review- Part II / Towards a Bettir FB 

ROW .' Tfie MWiler A (Jlitiiy Program to Eiamine Haw fJibbles From Disk 

Hardcore COMPUTIST TB; Softkeys for tf)e Scliolastic Version of Ban« Stteet Writer, Apptewriier Hi, SSI'S Non-ROOS Disks, BPI 

Accounting Programs and DesignWare Ptograms / Installing a Free Swtor Patch Into Applewriler lis I The Games of 1984- In Review 1 65C0S Chips 

Now Avail aele .' Checksall 1-2 I Simple Copy Protection 

Hardcore COMPUTIST 17: Softkeys for Ttie Pnni StMp, Crossword Magic, The Standing Stones. Beer flun Skytoi. and Random House 

Disks ( A Tulorial For Disk Inspection and Ihe Use 01 Super OB I The Graphic Grabber For Tha Prtrtt Shop f Ttie Lone Cstalog Arranger Part Two / 

S-C Macro Assemdlei Directives (Repnnt) 

Hardcore COMPUTIST 16: Softkeys tor Rescue Ranters, Sfieila, Basic Building Slocks. Artsci Programs, Crossfire. Sen5il)te Speller for 

ProDOS ano Sideways ; Secrel Weapon: HAMcaid t The Controller WrUer / A Ri For The Beyond Castle Wollensiein SollMy I The Lone Catalog 

A.'ranger Par: I 

Hardcore COMPUTIST 13; Sdtlieys tor Lai Pak. Beyond Castle Wollensiein. Transytvania The Quesl. Electronic Arts. Snooper Troops 

iCase 2). OLM Softwa'e. Learning Wiih Leepet I TeilSla- ' CSaver The Advanced Way fo Store Super lOB Controllers / Adding New Commwds lo 

DOS 3.3 ' Fuing ProDOS I.D 1 BSAVE Bug / REVIEW Enhancing Vour Apple I Locksmith 5C and Locks.miih Programming Language. 

Hardcore COMPUTIST 1 1; Copy II Plus 4 4C Update .' PAFIMS tor Essantial Data Duplicetot I UltimaKar III / Mappinfl ol Ultima 

JIh Ultima II.. The RosI ol the Picture > Soltkeys lor Safisibla Speller. Uiiinw ill. Softporn Advamuie. Ttie Eina«in Compiier y5.3. i 

Mask of tha Sun 

Hardcore COMPUTIST 7: Softkeys for Zaxjon. Mask of the Sun. Crush, Crumble i Chomp, Snalie Byle. DB Maslei h Mouskartacli. 

Features: Making Liberased Backups Ttiii Reiam Their Copy Ptoteetton. S-C Araembler: Review. Disk Oireciory Designer, Core' COBErtlet: Part t. 

Upper i !.ower Case Output tor Zork 

Hardcore COMPUTIST 4; Uilima II Charaaar Editor ; Softkays lor Ultima II. Witness, Prisons II, & Past Palrol / AdventutB Tips 

for Ultima 11 i III / Copy II Plus PARMS Update 

Hardcore COMPUTIST 1 : Softkeys for Data Reporter, t,(uttiptan i Zor* / PAflMS tot Copy II Plus / No Mori Bogs / APT's lor Chopliftar i 
Cannonbalj BLtz ( Hevtews Replay, Crackshol. Snapshot i Wildcard copy cards 

CORE 3 Games; Constructing Vour Own Joystick ( Compiling Games I GAME REVIEWS: Over 30 ot Itie lar^ and t»St / PidtOI TlwPack. 

AB-iime TOP 2D games ,' Destruolive Forces / EAMON / Graptuts Magician and GriFORTH / and Diagon Dungeon , 

CORE 2 Utilities: Dynamic Menu I High Res: Scroll Oenw i GOTO Latiel Heplace i Line Find ( Quick Copy Copy 

CORE 1 Graphics: Men^iKy Map / Text Graphics. Marquee. Bones. Jagged Scroller I Low Res' Color Character Chan I High R»s: Screen 
Cruncher, "he UFO Factory ( Color ( Vector Gr^hics: Shimmering Shapes.. A Shape Table Mim-Edilor .' Block Graphics. Aicade Ouatity Sraphics tor 
BASIC Ptogrammers / Animation. 

(*CORE is no longer published as an independent quarterly magazine.) 
Back isiiues not listed are no longer available. But disks are still available for 
ALL sold-out issues of Hardcore COMPUTIST upon request. 

Don't rypf IN programs that appear in 
Hardcore COMPUTIST. 

Order the 

Library Disk, 



instead! 



Each month a Library Disk with all the programs thot appeared in the previoiiS 
issue of Hardcore COMPUTIST is prepared for SMART READERS iike you who 
have better things to do with their time than type in program listings. Please use 
the order form to the left to order disks. 



Hoiv to make a 

Floppy disk shirt 



Requiremenl.s: 

A handful of your copy -protected eommerciai 

disks (thai you have already softkeyed) 
An overwhtilmingly large container of Super 

glue or Cra/y glue 
A strong pair of scissors 
A new Hardcore COMPLTlSfT'S/fcfcJuslm 

T-ihirt 
Some degree of dexterity and a sense of humor 

is helpful hut not necessar) 

Guaranteed to draw the rajM attention (angry 
stare) of any purveyor of copy -protected 
software, the Floppy disk shirt {DOS 3.3 or 
ProDOS I can he your symbol of total immunity 
to ihc plague of copy -protection. 

Follow these few simple steps and you'll Mwn 
be the infamous owner of a genuine Hardcore 
COMPUTIST Floppy disk shirt. 

1) Spread out your Diskbusters T-shirt on a flat 
surface so that the front faces up, 

2) Take about 6 of your original copy -protected 
disks with their fancy label*, still jniact and 
carefully arrange them on your diskbusters shin 
so that the diskbusters logo still shows. If you 



have lots of disks, you shotdd cut all of them 
in half so that you keep the half w nfi ihc label. 

3) Glue down these disks or Uisk Italvcs 

4) Wail a minute for the glue to dry, then 
carefully turn the shirt over and repeat steps 2.3 
and 4. 



5) Check for kwse spvts and glue them down 

61 Now you have a customized copy-protected 
Floppy .shirt that you can wear to any computer 
club nieeting or convention. 
Enjoy! 



1 hate niv glue anJ sti.'.sdrs ami kxktd-up ilj.sk.>.. sii ni.sh me . 



_llolall DISKBUSTERS T SHIRTS 



m the ^i/es indicaletj below. 1 have enclosed $<) 95 (plus lax ami >ihlppiTig) (ur eaih •ihirt 

.^DULT MENS; Small . Medium Urge .Xtra Urge 



Nume_ 



HC:."! 



Address _ 



City. 



.State. 



.Zip_ 



Signature. 



.Phtine. 



VISA/MC_ 



.Exp.. 



.Send check or money order to: Hardcore T-shirts. PO Box 1 108 16, Tacoma. WA 
9841 1 . Wa-shingtiin orders add 7.8^ sales ta.n. Foreign orders add 20^; shipping 
and handlini; US funds drawn on LIS bank. 



If you want the old issues of Hardcore Computing 

but find that nobody wants to sell you any for less than 

an arm, a leg, and your best speedup card or printer interface, 

then you need the next BEST thing... 



The Best Of Hardcore Computing 



We tore off the fancy covers, deleted all of the editorial material, 

tossed out the out-of-date intesrviews, and burnt all the letters. 

Then we updated all the nitty-gritty, hardcore articles, 

compiled an enormous data base of the most effective bit-copiers' parms 

and WE PACKED IT ALL INTO A SINGLE VOLUMEI 



So, you can go ahead and trade your arm and leg (or that rare Pretnier Issue, or you can get your copy of 
the Best Of Hardcore Cotnputing right now. Book: $14.95; Disk; $9.95 Book g Disk; SI 9.95. 

Send check or money order (US funds only) to: 

Hardcore COMPUTIST, PO Box 110846-B, Tacoma, WA, 98411. 

Washington slate orders add 7.6% sales tax. Foreign orders add 20% shipping and handling. 
VISA and MC orders enclose signature and expiration date 




You are entering DANGEROUS territory 



The 

Eook of Softkeys 

shows you how to softkey 

( remove copy-protection from ) 

commercial software. 

Volume I (157 pages) contains sottkeys for: Akalabeth, Ampermagic, Appfe 
Galaxian, Aztec, Bag of Tricks, Bill Budge's Trilogy, Buzzard Bait, CannonbatI Blitz, Casino, 
Data Reporter, Deadline, Disk Organizer II, Egbert II Communications Disk, Hard Hat Mack, 
Home Accountant, Homeword, Lancaster, Magic Window It, Multi-disk Catalog, Multiplan, 
Pest Patrol, Prisoner II, Sammy Lightfoot, Screen Writer II, Sneakers, Spy's Demise, 
Starcross, Suspended, Ultima Jl, Visifile, Visipiot, Visitrend, Witness, Wizardry, Zork I, 
Zork II, Zork III, plus how-to articles and program listings of need-to-have programs used 
to make unprotected backups. 

Volumes II and III are being compiled now! 

YES, I want _ copies of The Book Of Softkeys Volume 1 . I have enclosed $20 per book. 
Foreign orders add 20%. US, funds drawn on U.S. banks. Washington state orders add 7.8% 
sales tax. Send your orders to: Softkey Publistiing, PO Box 110816. Tatoma, VVA 98411 



Name. 



■7" 



.HC25-V1 



Address. 



City, 



State. 



Zip. 



Country . 
VisaMC. 



Phone. 



- Exp., 



Signature 



1 



If you want to make backups, then you wont Tt>e Book Of Softkeys Volume I, 
the only resource that teaches you how to backup your expensive Apple )( software. 



